CVE-2019-0042

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network.

Score
CVSS 3.0 5.7 Medium
Status
Modified - sirt@juniper.net
Published
2019-04-10
Last modified
2024-09-16
Weaknesses
CWE-305, CWE-404, CWE-669

Affected products

References