CVE-2020-1675CWE-299

Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.

High · published October 16, 2020

CVSS v3.1
8.3
EPSS
1%
Percentile
47.0
In the wild
Unconfirmed
What it is

When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00581 · 47.0th percentile
Weakness
CWE-299 · Improper Check for Certificate Revocation
Published
2020-10-16T20:31Z
EPSS history
Timeline
  • 16 OCT 20:31Z
    Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.
    cvelistv5