Vulnerability in Juniper Identity Management Service
CVE-2019-0042
Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.003 (19.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 19th percentile — 19.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Juniper Identity Management Service
- Juniper Networks Identity Management Service — versions unspecified
Weakness classification (CWE)
References
- kb.juniper.net/JSA10934 (Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-0042?
- CVE-2019-0042 is a medium-severity vulnerability in Juniper Identity Management Service, classified under Authentication Bypass by Primary Weakness. CVSS score: 4.2/10. Published 2019-04-10.
- How severe is CVE-2019-0042?
- Medium severity. CVSS v3 base score is 4.2 out of 10.