CVE Vulnerabilities

CVE-2023-28963

Improper Authentication

Published: Apr 17, 2023 | Modified: Apr 27, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An Improper Authentication vulnerability in cert-mgmt.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to read arbitrary files from temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to 19.1R3-S10; 19.2 versions prior to 19.2R3-S7; 19.3 versions prior to 19.3R3-S8; 19.4 versions prior to 19.4R3-S11; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S7; 20.3 version 20.3R1 and later versions; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S5; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Junos Juniper * *
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 19.4 19.4
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.1 20.1
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.2 20.2
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.3 20.3
Junos Juniper 20.4 20.4
Junos Juniper 20.4 20.4
Junos Juniper 20.4 20.4
Junos Juniper 20.4 20.4
Junos Juniper 20.4 20.4
Junos Juniper 20.4 20.4
Junos Juniper 20.4 20.4
Junos Juniper 20.4 20.4
Junos Juniper 20.4 20.4
Junos Juniper 20.4 20.4
Junos Juniper 20.4 20.4
Junos Juniper 20.4 20.4
Junos Juniper 21.1 21.1
Junos Juniper 21.1 21.1
Junos Juniper 21.1 21.1
Junos Juniper 21.1 21.1
Junos Juniper 21.1 21.1
Junos Juniper 21.1 21.1
Junos Juniper 21.1 21.1
Junos Juniper 21.1 21.1
Junos Juniper 21.1 21.1
Junos Juniper 21.1 21.1
Junos Juniper 21.1 21.1
Junos Juniper 21.1 21.1
Junos Juniper 21.2 21.2
Junos Juniper 21.2 21.2
Junos Juniper 21.2 21.2
Junos Juniper 21.2 21.2
Junos Juniper 21.2 21.2
Junos Juniper 21.2 21.2
Junos Juniper 21.2 21.2
Junos Juniper 21.2 21.2
Junos Juniper 21.2 21.2
Junos Juniper 21.2 21.2
Junos Juniper 21.2 21.2
Junos Juniper 21.3 21.3
Junos Juniper 21.3 21.3
Junos Juniper 21.3 21.3
Junos Juniper 21.3 21.3
Junos Juniper 21.3 21.3
Junos Juniper 21.3 21.3
Junos Juniper 21.3 21.3
Junos Juniper 21.3 21.3
Junos Juniper 21.3 21.3
Junos Juniper 21.3 21.3
Junos Juniper 21.4 21.4
Junos Juniper 21.4 21.4
Junos Juniper 21.4 21.4
Junos Juniper 21.4 21.4
Junos Juniper 21.4 21.4
Junos Juniper 21.4 21.4
Junos Juniper 21.4 21.4
Junos Juniper 21.4 21.4
Junos Juniper 21.4 21.4
Junos Juniper 21.4 21.4
Junos Juniper 22.1 22.1
Junos Juniper 22.1 22.1
Junos Juniper 22.1 22.1
Junos Juniper 22.1 22.1
Junos Juniper 22.1 22.1
Junos Juniper 22.1 22.1
Junos Juniper 22.1 22.1
Junos Juniper 22.2 22.2
Junos Juniper 22.2 22.2
Junos Juniper 22.2 22.2
Junos Juniper 22.2 22.2
Junos Juniper 22.3 22.3
Junos Juniper 22.3 22.3

Potential Mitigations

References