Vulnerability · Published Oct 16, 2020 · Assigned by juniper
CVE-2020-1675Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.
High 8.3
In plain English
A high-severity security flaw in MIST Cloud UI from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.6%top 52.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Juniper Networks | MIST Cloud UI | unspecified – before 09/02/2020 |
Weakness: CWE-299 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
References
- https://kb.juniper.net/JSA11072 x_refsource_CONFIRM