QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-0054

Back to search

CVE-2019-0054

Published: Oct 9, 2019

Modified: Sep 17, 2024

PUBLISHED

CVSS v3.1

6.8

MEDIUM

Description

An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.

VendorProductVersions

Juniper Networks

Junos OS

affected
15.1X49 - < 15.1X49-D120

Weaknesses (CWE)

CWE-295
CWE-300

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now