What is CVE-2019-0042?

CVE-2019-0042 is a medium-severity vulnerability in Juniper Identity Management Service, classified under Authentication Bypass by Primary Weakness. CVSS score: 4.2/10. Published 2019-04-10.

How severe is CVE-2019-0042?

Medium severity. CVSS v3 base score is 4.2 out of 10.

Vulnerability in Juniper Identity Management Service

CVE-2019-0042

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network.

EPSS: 0.003 (21.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Juniper Identity_management_service
Juniper Networks Identity Management Service — versions unspecified

Weakness classification (CWE)

References

sirt@juniper.net (x_refsource_CONFIRM, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2019-0042?: CVE-2019-0042 is a medium-severity vulnerability in Juniper Identity Management Service, classified under Authentication Bypass by Primary Weakness. CVSS score: 4.2/10. Published 2019-04-10.
How severe is CVE-2019-0042?: Medium severity. CVSS v3 base score is 4.2 out of 10.