CVE Vulnerabilities

CVE-2020-1637

Improper Authentication

Published: Apr 08, 2020 | Modified: Nov 28, 2021
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permitted by a UAC policy. This issue might occur when the IP address range configured in the Infranet Controller (IC) is configured as an IP address range instead of an IP address/netmask. See the Workaround section for more detail. The Junos OS Enforcer CLI settings are disabled by default. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D100; 15.1X49 versions prior to 15.1X49-D210; 17.3 versions prior to 17.3R2-S5, 17.3R3-S8; 17.4 versions prior to 17.4R2-S9, 17.4R3-S1; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R3-S2; 18.4 versions prior to 18.4R1-S6, 18.4R2-S4, 18.4R3-S1; 19.1 versions prior to 19.1R1-S4, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S3, 19.2R2; 19.3 versions prior to 19.3R2-S1, 19.3R3; 19.4 versions prior to 19.4R1-S1, 19.4R2.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Junos Juniper 12.3x48 (including) 12.3x48 (including)
Junos Juniper 12.3x48-d10 (including) 12.3x48-d10 (including)
Junos Juniper 12.3x48-d15 (including) 12.3x48-d15 (including)
Junos Juniper 12.3x48-d20 (including) 12.3x48-d20 (including)
Junos Juniper 12.3x48-d25 (including) 12.3x48-d25 (including)
Junos Juniper 12.3x48-d30 (including) 12.3x48-d30 (including)
Junos Juniper 12.3x48-d35 (including) 12.3x48-d35 (including)
Junos Juniper 12.3x48-d40 (including) 12.3x48-d40 (including)
Junos Juniper 12.3x48-d45 (including) 12.3x48-d45 (including)
Junos Juniper 12.3x48-d50 (including) 12.3x48-d50 (including)
Junos Juniper 12.3x48-d51 (including) 12.3x48-d51 (including)
Junos Juniper 12.3x48-d55 (including) 12.3x48-d55 (including)
Junos Juniper 12.3x48-d60 (including) 12.3x48-d60 (including)
Junos Juniper 12.3x48-d65 (including) 12.3x48-d65 (including)
Junos Juniper 12.3x48-d70 (including) 12.3x48-d70 (including)
Junos Juniper 12.3x48-d75 (including) 12.3x48-d75 (including)
Junos Juniper 12.3x48-d80 (including) 12.3x48-d80 (including)
Junos Juniper 15.1x49 (including) 15.1x49 (including)
Junos Juniper 15.1x49-d10 (including) 15.1x49-d10 (including)
Junos Juniper 15.1x49-d100 (including) 15.1x49-d100 (including)
Junos Juniper 15.1x49-d110 (including) 15.1x49-d110 (including)
Junos Juniper 15.1x49-d120 (including) 15.1x49-d120 (including)
Junos Juniper 15.1x49-d130 (including) 15.1x49-d130 (including)
Junos Juniper 15.1x49-d140 (including) 15.1x49-d140 (including)
Junos Juniper 15.1x49-d15 (including) 15.1x49-d15 (including)
Junos Juniper 15.1x49-d150 (including) 15.1x49-d150 (including)
Junos Juniper 15.1x49-d160 (including) 15.1x49-d160 (including)
Junos Juniper 15.1x49-d170 (including) 15.1x49-d170 (including)
Junos Juniper 15.1x49-d180 (including) 15.1x49-d180 (including)
Junos Juniper 15.1x49-d190 (including) 15.1x49-d190 (including)
Junos Juniper 15.1x49-d20 (including) 15.1x49-d20 (including)
Junos Juniper 15.1x49-d200 (including) 15.1x49-d200 (including)
Junos Juniper 15.1x49-d25 (including) 15.1x49-d25 (including)
Junos Juniper 15.1x49-d30 (including) 15.1x49-d30 (including)
Junos Juniper 15.1x49-d35 (including) 15.1x49-d35 (including)
Junos Juniper 15.1x49-d40 (including) 15.1x49-d40 (including)
Junos Juniper 15.1x49-d45 (including) 15.1x49-d45 (including)
Junos Juniper 15.1x49-d50 (including) 15.1x49-d50 (including)
Junos Juniper 15.1x49-d55 (including) 15.1x49-d55 (including)
Junos Juniper 15.1x49-d60 (including) 15.1x49-d60 (including)
Junos Juniper 15.1x49-d65 (including) 15.1x49-d65 (including)
Junos Juniper 15.1x49-d70 (including) 15.1x49-d70 (including)
Junos Juniper 15.1x49-d75 (including) 15.1x49-d75 (including)
Junos Juniper 15.1x49-d80 (including) 15.1x49-d80 (including)
Junos Juniper 15.1x49-d90 (including) 15.1x49-d90 (including)
Junos Juniper 17.3 (including) 17.3 (including)
Junos Juniper 17.3-r1-s1 (including) 17.3-r1-s1 (including)
Junos Juniper 17.3-r2 (including) 17.3-r2 (including)
Junos Juniper 17.3-r2-s1 (including) 17.3-r2-s1 (including)
Junos Juniper 17.3-r2-s2 (including) 17.3-r2-s2 (including)
Junos Juniper 17.3-r2-s3 (including) 17.3-r2-s3 (including)
Junos Juniper 17.3-r2-s4 (including) 17.3-r2-s4 (including)
Junos Juniper 17.3-r3 (including) 17.3-r3 (including)
Junos Juniper 17.3-r3-s1 (including) 17.3-r3-s1 (including)
Junos Juniper 17.3-r3-s2 (including) 17.3-r3-s2 (including)
Junos Juniper 17.3-r3-s3 (including) 17.3-r3-s3 (including)
Junos Juniper 17.3-r3-s4 (including) 17.3-r3-s4 (including)
Junos Juniper 17.3-r3-s5 (including) 17.3-r3-s5 (including)
Junos Juniper 17.3-r3-s6 (including) 17.3-r3-s6 (including)
Junos Juniper 17.3-r3-s7 (including) 17.3-r3-s7 (including)
Junos Juniper 17.4 (including) 17.4 (including)
Junos Juniper 17.4-r1 (including) 17.4-r1 (including)
Junos Juniper 17.4-r1-s1 (including) 17.4-r1-s1 (including)
Junos Juniper 17.4-r1-s2 (including) 17.4-r1-s2 (including)
Junos Juniper 17.4-r1-s4 (including) 17.4-r1-s4 (including)
Junos Juniper 17.4-r1-s5 (including) 17.4-r1-s5 (including)
Junos Juniper 17.4-r1-s6 (including) 17.4-r1-s6 (including)
Junos Juniper 17.4-r1-s7 (including) 17.4-r1-s7 (including)
Junos Juniper 17.4-r2 (including) 17.4-r2 (including)
Junos Juniper 17.4-r2-s1 (including) 17.4-r2-s1 (including)
Junos Juniper 17.4-r2-s2 (including) 17.4-r2-s2 (including)
Junos Juniper 17.4-r2-s3 (including) 17.4-r2-s3 (including)
Junos Juniper 17.4-r2-s4 (including) 17.4-r2-s4 (including)
Junos Juniper 17.4-r2-s5 (including) 17.4-r2-s5 (including)
Junos Juniper 17.4-r2-s6 (including) 17.4-r2-s6 (including)
Junos Juniper 17.4-r2-s7 (including) 17.4-r2-s7 (including)
Junos Juniper 17.4-r2-s8 (including) 17.4-r2-s8 (including)
Junos Juniper 17.4-r3 (including) 17.4-r3 (including)
Junos Juniper 18.1 (including) 18.1 (including)
Junos Juniper 18.1-r2 (including) 18.1-r2 (including)
Junos Juniper 18.1-r2-s1 (including) 18.1-r2-s1 (including)
Junos Juniper 18.1-r2-s2 (including) 18.1-r2-s2 (including)
Junos Juniper 18.1-r2-s4 (including) 18.1-r2-s4 (including)
Junos Juniper 18.1-r3 (including) 18.1-r3 (including)
Junos Juniper 18.1-r3-s1 (including) 18.1-r3-s1 (including)
Junos Juniper 18.1-r3-s2 (including) 18.1-r3-s2 (including)
Junos Juniper 18.1-r3-s3 (including) 18.1-r3-s3 (including)
Junos Juniper 18.1-r3-s4 (including) 18.1-r3-s4 (including)
Junos Juniper 18.1-r3-s6 (including) 18.1-r3-s6 (including)
Junos Juniper 18.1-r3-s7 (including) 18.1-r3-s7 (including)
Junos Juniper 18.1-r3-s8 (including) 18.1-r3-s8 (including)
Junos Juniper 18.1-r3-s9 (including) 18.1-r3-s9 (including)
Junos Juniper 18.2 (including) 18.2 (including)
Junos Juniper 18.2-r1 (including) 18.2-r1 (including)
Junos Juniper 18.2-r1-s3 (including) 18.2-r1-s3 (including)
Junos Juniper 18.2-r1-s5 (including) 18.2-r1-s5 (including)
Junos Juniper 18.2-r2-s1 (including) 18.2-r2-s1 (including)
Junos Juniper 18.2-r2-s2 (including) 18.2-r2-s2 (including)
Junos Juniper 18.2-r2-s3 (including) 18.2-r2-s3 (including)
Junos Juniper 18.2-r2-s4 (including) 18.2-r2-s4 (including)
Junos Juniper 18.2-r2-s5 (including) 18.2-r2-s5 (including)
Junos Juniper 18.2-r2-s6 (including) 18.2-r2-s6 (including)
Junos Juniper 18.2-r3 (including) 18.2-r3 (including)
Junos Juniper 18.2-r3-s1 (including) 18.2-r3-s1 (including)
Junos Juniper 18.2-r3-s2 (including) 18.2-r3-s2 (including)
Junos Juniper 18.3 (including) 18.3 (including)
Junos Juniper 18.3-r1 (including) 18.3-r1 (including)
Junos Juniper 18.3-r1-s1 (including) 18.3-r1-s1 (including)
Junos Juniper 18.3-r1-s2 (including) 18.3-r1-s2 (including)
Junos Juniper 18.3-r1-s3 (including) 18.3-r1-s3 (including)
Junos Juniper 18.3-r1-s4 (including) 18.3-r1-s4 (including)
Junos Juniper 18.3-r1-s5 (including) 18.3-r1-s5 (including)
Junos Juniper 18.3-r1-s6 (including) 18.3-r1-s6 (including)
Junos Juniper 18.3-r2 (including) 18.3-r2 (including)
Junos Juniper 18.3-r2-s1 (including) 18.3-r2-s1 (including)
Junos Juniper 18.3-r2-s2 (including) 18.3-r2-s2 (including)
Junos Juniper 18.3-r3 (including) 18.3-r3 (including)
Junos Juniper 18.3-r3-s1 (including) 18.3-r3-s1 (including)
Junos Juniper 18.4 (including) 18.4 (including)
Junos Juniper 18.4-r1 (including) 18.4-r1 (including)
Junos Juniper 18.4-r1-s1 (including) 18.4-r1-s1 (including)
Junos Juniper 18.4-r1-s2 (including) 18.4-r1-s2 (including)
Junos Juniper 18.4-r1-s3 (including) 18.4-r1-s3 (including)
Junos Juniper 18.4-r1-s4 (including) 18.4-r1-s4 (including)
Junos Juniper 18.4-r1-s5 (including) 18.4-r1-s5 (including)
Junos Juniper 18.4-r2 (including) 18.4-r2 (including)
Junos Juniper 18.4-r2-s1 (including) 18.4-r2-s1 (including)
Junos Juniper 18.4-r2-s2 (including) 18.4-r2-s2 (including)
Junos Juniper 18.4-r2-s3 (including) 18.4-r2-s3 (including)
Junos Juniper 18.4-r3 (including) 18.4-r3 (including)
Junos Juniper 19.1 (including) 19.1 (including)
Junos Juniper 19.1-r1 (including) 19.1-r1 (including)
Junos Juniper 19.1-r1-s1 (including) 19.1-r1-s1 (including)
Junos Juniper 19.1-r1-s2 (including) 19.1-r1-s2 (including)
Junos Juniper 19.1-r1-s3 (including) 19.1-r1-s3 (including)
Junos Juniper 19.1-r2 (including) 19.1-r2 (including)
Junos Juniper 19.2 (including) 19.2 (including)
Junos Juniper 19.2-r1 (including) 19.2-r1 (including)
Junos Juniper 19.2-r1-s1 (including) 19.2-r1-s1 (including)
Junos Juniper 19.2-r1-s2 (including) 19.2-r1-s2 (including)
Junos Juniper 19.3-r2 (including) 19.3-r2 (including)
Junos Juniper 19.4-r1 (including) 19.4-r1 (including)

Potential Mitigations

References