An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.
References
| Link | Resource |
|---|---|
| https://kb.juniper.net/JSA10952 | Vendor Advisory |
| https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2019-10-09 20:15
Updated : 2023-12-10 13:13
NVD link : CVE-2019-0054
Mitre link : CVE-2019-0054
CVE.ORG link : CVE-2019-0054
JSON object : View
Products Affected
juniper
- srx550
- srx1400
- srx550_hm
- srx3600
- srx3400
- vsrx
- srx650
- csrx
- srx210
- srx4200
- srx320
- srx340
- srx345
- srx5800
- srx110
- srx5600
- srx4100
- srx5400
- junos
- srx220
- srx100
- srx4600
- srx1500
- srx300
- srx240