CVE-2021-31380mediumCWE-16CWE-200

CVE-2021-31380: falha de média gravidade em Juniper Networks SRC Series

SRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive information

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SRC Series

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 1.1%
A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to disclose sensitive information in the HTTP response which allows the attacker to obtain sensitive information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Juniper Networks · SRC Series
CVEs relacionadas — Juniper Networks SRC Series

No mesmo produto, das mais perigosas para as menos.

CVE-2021-31381MEDIUMSRC Series: A remote attacker sending a specially crafted query may cause the web server to delete filesEPSS 1.2%CVE-2021-31352MEDIUMSRC Series: NETCONF over SSH allows negotiation of weak ciphersEPSS 0.8%