Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-103404

Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tmp directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Session Smart Conductor

Default version status: unaffected

  • 0 to < 7.0.5affected
  • 7.1.0 to < 7.1.7affected
  • 7.2.0 to < 7.2.3affected

References