Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-31349

Session Smart Router: Authentication Bypass Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

The usage of an internal HTTP header created an authentication bypass vulnerability (CWE-287), allowing an attacker to view internal files, change settings, manipulate services and execute arbitrary code. This issue affects all Juniper Networks 128 Technology Session Smart Router versions prior to 4.5.11, and all versions of 5.0 up to and including 5.0.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks 128 Technology Session Smart Router

  • unspecified to < 4.5.11affected
  • 5.0 to ≤ 5.0.1affected

References