Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to safe mode authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the request system software command with the partition option.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Junos | Juniper | * | 12.1x46 (including) |