CVE-2021-31381mediumCWE-16CWE-200

CVE-2021-31381: falha de média gravidade em Juniper Networks SRC Series

SRC Series: A remote attacker sending a specially crafted query may cause the web server to delete files

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SRC Series

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 1.2%
A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to delete files which may allow the attacker to disrupt the integrity and availability of the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Produtos afetados
Juniper Networks · SRC Series
CVEs relacionadas — Juniper Networks SRC Series

No mesmo produto, das mais perigosas para as menos.

CVE-2021-31380MEDIUMSRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive informationEPSS 1.1%CVE-2021-31352MEDIUMSRC Series: NETCONF over SSH allows negotiation of weak ciphersEPSS 0.8%