CVE Vulnerabilities

CVE-2021-31380

Published: Oct 19, 2021 | Modified: Oct 25, 2021
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to disclose sensitive information in the HTTP response which allows the attacker to obtain sensitive information.

Affected Software

Name Vendor Start Version End Version
Session_and_resource_control Juniper * 4.12.0r5 (excluding)
Session_and_resource_control Juniper 4.13.0r1 (including) 4.13.0r3 (excluding)

References