When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials in the initial HTTP/HTTPS session is at risk that these credentials may be captured during follow-on HTTP/HTTPS requests by a malicious actor through a man-in-the-middle attack or by authentic servers subverted by malicious actors. FTP, and Telnet pass-through authentication services are not affected. Affected releases are Juniper Networks SRX Series: 12.1X46 versions prior to 12.1X46-D67 on SRX Series; 12.3X48 versions prior to 12.3X48-D25 on SRX Series; 15.1X49 versions prior to 15.1X49-D35 on SRX Series.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/104719 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1041316 | Third Party Advisory VDB Entry |
| https://kb.juniper.net/JSA10858 | Mitigation Vendor Advisory |
| https://www.juniper.net/documentation/en_US/junos/topics/concept/firewall-user-authentication-pass-through-understanding.html | Vendor Advisory |
| https://www.juniper.net/documentation/en_US/junos/topics/example/firewall-user-authentication-pass-through-configuring-cli.html | Vendor Advisory |
| https://www.juniper.net/documentation/en_US/junos/topics/example/security-https-traffic-to-trigger-pass-through-authentication-configuring.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
No history.
Information
Published : 2018-07-11 18:29
Updated : 2019-10-09 23:31
NVD link : CVE-2018-0025
Mitre link : CVE-2018-0025
CVE.ORG link : CVE-2018-0025
JSON object : View
Products Affected
juniper
- junos
- srx3600
- srx320
- srx5400
- srx1400
- srx4100
- srx4200
- srx550
- srx5800
- srx650
- srx100
- srx110
- srx340
- srx345
- srx1500
- srx5600
- srx3400
- srx240
- srx220
- srx300
- srx210
CWE
NVD-CWE-noinfo
CWE-300
Channel Accessible by Non-Endpoint
CWE-319Cleartext Transmission of Sensitive Information