What is CVE-2021-0231?

CVE-2021-0231 is a medium-severity vulnerability in Juniper Junos, classified under Path Traversal. CVSS score: 6.5/10. Published 2021-04-22.

How severe is CVE-2021-0231?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Path Traversal in Juniper Junos

CVE-2021-0231

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S3, 20.2R2; This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.012 (65.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Juniper Junos — versions 19.3, 19.4, 20.1
Juniper Srx1500
Juniper Srx300
Juniper Srx320
Juniper Srx340
Juniper Srx345
Juniper Srx380
Juniper Srx4100
Juniper Srx4200
Juniper Srx4600

Weakness classification (CWE)

CWE-22 — Path Traversal

References

sirt@juniper.net (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-0231?: CVE-2021-0231 is a medium-severity vulnerability in Juniper Junos, classified under Path Traversal. CVSS score: 6.5/10. Published 2021-04-22.
How severe is CVE-2021-0231?: Medium severity. CVSS v3 base score is 6.5 out of 10.