CVE-2019-0054

An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.

Score

CVSS 3.1 7.4 High

Status

Modified - sirt@juniper.net

Published

2019-10-09

Last modified

2024-09-17

Weaknesses

CWE-295, CWE-300

Affected products

• Junos (Juniper)
• Junos Os (Juniper Networks)

References

• https://kb.juniper.net/JSA10952
• https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html