Paragon Active Assurance Control Center: Information disclosure vulnerability

CVE-2024-21589

Summary

An Improper Access Control vulnerability exists in the Juniper Networks Paragon Active Assurance Control Center, allowing unauthenticated network-based attackers to gain unauthorized access to sensitive reports. This vulnerability could enable malicious actors to exfiltrate user data by bypassing authentication requirements. The issue originated from a feature introduced in version 3.1.0, designed to permit selective sharing of account data. It is crucial for users of the affected versions to assess their systems and apply necessary mitigations, as the SaaS offering of Paragon Active Assurance remains unaffected.

References