CVE-2023-36851 (junos)

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.



With a specific request to

webauth_operation.php

that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of

integrity

for a certain part of the file system, which may allow chaining to other vulnerabilities.


This issue affects Juniper Networks Junos OS on SRX Series: …

attacker authentication critical cve file files file system function impact integrity juniper juniper networks junos junos os loss missing network networks php request series system unauthenticated upload vulnerability web