CVEvulnerability

CVE-2019-0042

4.2 MEDIUM Published 2019-04-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-04-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.2 MEDIUM — CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0 ([email protected])
5.7 MEDIUM — CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-305, CWE-404, CWE-669

Description

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network.

Affected configurations

• juniper identity management service (< 1.1.4)

Related

Weakness · CWE (3)

  • CWE-305 Authentication Bypass by Primary Weakness weakness
  • CWE-404 Improper Resource Shutdown or Release weakness
  • CWE-669 Incorrect Resource Transfer Between Spheres weakness

References