CVE-2019-0042CWE-305CWE-404CWE-669

Incorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devices

Medium · published April 10, 2019

CVSS v3.0
5.7
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network.

The record
Technical detail
CVSS v3.0
5.7 · MEDIUM
Vector
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.4th percentile
Weaknesses
CWE-305 · Authentication Bypass by Primary Weakness; CWE-404 · Improper Resource Shutdown or Release; CWE-669 · Incorrect Resource Transfer Between Spheres
Published
2019-04-10T20:13Z
EPSS history
Timeline
  • 10 APR 20:13Z
    Incorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devices
    cvelistv5