medium6.8
CVE-2019-0054
An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows a…
Impact
An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Juniper | Junos | Version 15.1x49 |
Weakness classification
References
- NVD record
- CVE.org record
- https://kb.juniper.net/JSA10952
- https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html
- https://kb.juniper.net/JSA10952
- https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html