2 lines
9.1 KiB
JSON
2 lines
9.1 KiB
JSON
{"affected":[{"affectedData":[{"platforms":["SRX Series"],"product":"Junos OS","vendor":"Juniper Networks","versions":[{"lessThan":"15.1X49-D120","status":"affected","version":"15.1X49","versionType":"custom"}]}],"source":"sirt@juniper.net"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*","matchCriteriaId":"27A6BF09-ABBF-4126-ADD6-B174937F8554","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*","matchCriteriaId":"D90D8985-34EF-44CC-A9A7-CB0FD22676F2","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*","matchCriteriaId":"856A5668-FA4F-44E9-A3F0-BE4979F631E2","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*","matchCriteriaId":"F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*","matchCriteriaId":"18468579-0195-4DDE-BAA5-4BE4068F3A69","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*","matchCriteriaId":"0E5FAA97-171F-4DB9-B78E-6E1A5F34336A","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*","matchCriteriaId":"870244F3-1C05-4F10-A205-5189BB860F46","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*","matchCriteriaId":"235EE40B-AA15-4F39-8087-A051F4F70995","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*","matchCriteriaId":"17330544-3AFC-463E-A146-2840A8AE17D2","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*","matchCriteriaId":"8ABA301F-7866-42A5-8391-E07BEAFF06FA","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*","matchCriteriaId":"884E4A85-ED42-4391-9FDD-9052F957743A","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*","matchCriteriaId":"1901864B-688B-4352-A587-4B96B4E49FB1","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*","matchCriteriaId":"78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*","matchCriteriaId":"1B6670FB-9F5A-469B-97F2-074C28572065","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*","matchCriteriaId":"71198992-83AA-4E28-BA7D-A3C1897B5E2B","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*","matchCriteriaId":"4323D874-C317-4D76-8E2D-C82376D84CBE","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*","matchCriteriaId":"F56067DA-EBA9-481A-B60B-52148584EFBD","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*","matchCriteriaId":"11D4A86D-BDB4-4A01-96FE-7E023C58074B","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*","matchCriteriaId":"561C1113-3D59-4DD9-ADA7-3C9ECC4632EC","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*","matchCriteriaId":"78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*","matchCriteriaId":"927EAB8B-EC3B-4B12-85B9-5517EBA49A30","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*","matchCriteriaId":"2CEBF85C-736A-4E7D-956A-3E8210D4F70B","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*","matchCriteriaId":"CD647C15-A686-4C8F-A766-BC29404C0FED","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*","matchCriteriaId":"45AB1622-1AED-4CD7-98F1-67779CDFC321","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*","matchCriteriaId":"89276D88-3B8D-4168-A2CD-0920297485F2","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*","matchCriteriaId":"BB5AB24B-2B43-43DD-AE10-F758B4B19F2A","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*","matchCriteriaId":"80F9DC32-5ADF-4430-B1A6-357D0B29DB78","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*","matchCriteriaId":"8B82D4C4-7A65-409A-926F-33C054DCBFBA","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*","matchCriteriaId":"746C3882-2A5B-4215-B259-EB1FD60C513D","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*","matchCriteriaId":"CE535749-F4CE-4FFA-B23D-BF09C92481E5","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*","matchCriteriaId":"DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*","matchCriteriaId":"3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*","matchCriteriaId":"CCC5F6F5-4347-49D3-909A-27A3A96D36C9","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*","matchCriteriaId":"56BA6B86-D3F4-4496-AE46-AC513C6560FA","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*","matchCriteriaId":"2FDDC897-747F-44DD-9599-7266F9B5B7B1","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*","matchCriteriaId":"62FC145A-D477-4C86-89E7-F70F52773801","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*","matchCriteriaId":"06685D0E-A075-49A5-9EF4-34F0F795C8C6","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*","matchCriteriaId":"68CA098D-CBE4-4E62-9EC0-43E1B6098710","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*","matchCriteriaId":"66F474D4-79B6-4525-983C-9A9011BD958B","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*","matchCriteriaId":"8AA424D4-4DBF-4E8C-96B8-E37741B5403E","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:*","matchCriteriaId":"8B10DFCE-5331-4D79-8D9F-EF84743493D3","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected."},{"lang":"es","value":"Una debilidad de Comprobación de Certificado Inapropiada en el cliente de actualización de firma de SRX Series Application Identification (app-id) de Juniper Networks Junos OS, permite a un atacante realizar ataques de tipo Man-in-the-Middle (MitM) que pueden comprometer la integridad y confidencialidad del dispositivo . Este problema afecta a: Juniper Networks Junos OS versiones 15.1X49 anteriores a 15.1X49-D120 en dispositivos de la Serie SRX. Ninguna otra versión del sistema operativo Junos está afectada."}],"id":"CVE-2019-0054","lastModified":"2026-06-17T02:07:36.920","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.2,"source":"sirt@juniper.net","type":"Secondary"},{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-10-09T20:15:16.347","references":[{"source":"sirt@juniper.net","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA10952"},{"source":"sirt@juniper.net","tags":["Vendor Advisory"],"url":"https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA10952"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html"}],"sourceIdentifier":"sirt@juniper.net","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-295"},{"lang":"en","value":"CWE-300"}],"source":"sirt@juniper.net","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-295"}],"source":"nvd@nist.gov","type":"Primary"}]}
|