Unauthorized Access to Protected Files in Junos OS CLI
CVE-2024-39527
Summary
A vulnerability in the command-line interface of Juniper Networks Junos OS on SRX Series devices allows local, low-privileged users access to sensitive files that should remain protected. By executing specially crafted CLI commands, these users can expose and view contents of secure files on the file system, potentially leveraging this information for further system impact. This issue highlights significant security concerns, especially for environments relying on proper permission controls to safeguard sensitive data. Users are advised to assess their systems and apply necessary updates to mitigate this risk.
Affected Version(s)
Junos OS SRX Series 0 < 21.4R3-S8
Junos OS SRX Series 22.2 < 22.2R3-S5
Junos OS SRX Series 22.3 < 22.3R3-S4
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved