A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables.
Using a crafted request an attacker is able to modify
certain PHP environment variables leading to partial loss of integrity, which may allow chaining to other vulnerabilities.
This issue affects Juniper Networks Junos OS on EX Series:
* All versions prior to 20.4R3-S9;
* 21.1 versions 21.1R1 and later;
* 21.2 versions prior to 21.2R3-S7;
* 21.3 versions
prior to
21.3R3-S5;
* 21.4 versions
prior to
21.4R3-S5;
* 22.1 versions
prior to
22.1R3-S4;
* 22.2 versions
prior to
22.2R3-S2;
* 22.3 versions
prior to 22.3R3-S1;
* 22.4 versions
prior to
22.4R2-S2, 22.4R3;
* 23.2 versions prior to
23.2R1-S1, 23.2R2.
Connections 65
has cited scope1 retained · stored CVE-2023-36844 → Juniper Networks · Junos OS7cfc0c01-53bc-4e18-89f1-ea66fec0664d
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-mpea50df3b-3ad4-4638-bc86-1a3ad2cfe5f6
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4600-vc188c7ebc-1c5b-42d1-bea2-47f966b8bd6d
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48tdc60987e46-7cc6-4790-854a-2dfc6e8cb3b7
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300c60074f9-8577-4366-80c3-832459b736c9
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48t-dc392eab96-0b6a-42dc-bc81-582ee63038aa
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex2300-48mp6dc83c96-abd6-4c1b-98e4-4d8afaeb6a9d
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex82160aa09ec1-dc1c-460d-bf77-a0e53e3cced0
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex9208dd96c6da-3489-43c2-ae56-188e4e0aca6e
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex3300c1efe9e1-3bbb-4468-a4a5-cf670520c53f
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48mpc821e03e-18ad-4d35-bf35-b75fbea4f15f
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex2300-24tf7aebe04-b93c-4508-9f60-56240d912502
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex2200-vce243336c-a075-4bec-9fa5-404bed47e8cf
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex92536f17d778-43df-42e5-95e7-8bbb08e9c440
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex9204897ff2fa-45ad-4ba2-a9da-5c612ec8d289
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4500f4ec0d0b-6eda-4f8d-be21-ce917c5a849e
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48t-dc-afi34397eec-a200-4986-bf9d-e9c265bc9f05
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4400ee2ef9df-62aa-4adc-b208-30e71e343edc
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex2300-24mp1d9c6ca6-d973-426c-8f88-217b3383fb90
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4500-vcf207b0d0-67a3-4013-a776-bcd6271ba6c5
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex8200f7a81041-7b0a-40c6-bf21-3a68ee9239f3
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-32f-sb57da39a-4572-4625-9781-140ade9ac35a
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex2300m98e01c77-4461-4e12-9e38-9c44636835ea
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex8200-vcb4562c20-dc28-4ce5-875c-4611ae380002
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-32fd1468133-cb1a-4a91-9d5b-111816ac244d
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-24t-sc8009d1c-7806-4d87-85bc-ee966808a059
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4600c1ea9aae-88f0-402f-9211-0c03ba50f82d
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-24p-sa7221fb0-e239-4b51-8a4b-eb4f6c50d101
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex2300ec26fff7-0372-4c9d-897c-9389757f6192
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48tafi8fb93faf-daa3-4ba0-859a-4ffc3c37b48c
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48mp-s2d07b045-40a5-4d8b-8d64-f6d7b213e63c
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex3200a744285d-6432-4741-abde-73109e3f4348
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex2200-c9ecfbe14-fff7-457f-8259-9613d410f398
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex2300-48pb01be4d4-0b24-4cf1-8eca-0363ceec3020
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex34006387ea7e-6e07-4060-b94e-fbba34f17975
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-24pe1213ff8-5f72-42bc-ad4b-5b1b31ae9c99
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300m0d5095ba-28b7-43fe-8bc2-a23613cf86f1
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex42004552677c-a67e-4200-b3da-e007b9690a5d
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48t-sf8f718a3-27fb-44e8-8d57-c7d62c15d2de
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex9250225fec77-8580-41ee-8371-731688720870
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4550/vc28df557a-333c-480f-8eb2-b8b17792dab1
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex2300-24p7234b2d1-ea4e-4159-ae34-b1fee544f786
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48teecb625f-a0ab-43c8-a6f6-0fb81aba66cf
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex3300-vceaa942ea-cde5-4b3e-a913-6e3a054d8c81
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex9200d04cdd4b-160c-48c4-928f-adb1a198feb8
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-24ta1d5fd07-7e2d-4d75-9588-3551ef9d3ea1
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex220037538fbe-e3a5-4c8a-b1a8-787595d389dc
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex621084fe38e1-b6b0-4078-a675-3d492a786493
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex45500bca48db-3dce-4aa3-9f9e-643439aa6873
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex2300-48te1c0f4ef-c2ae-408a-9709-4c69c8542131
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-32f-dcbc85c8b3-b756-46aa-b1b4-4b7af111bae2
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex620078c29072-aa1e-4f1d-a409-15470a94c568
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48t-afi59f01f8d-dfa8-47a6-b6ec-ce9d2330dd5c
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex82082386cacd-f669-4e20-8f5f-d3a28376b68a
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-vc9b6be8bd-fb4c-422d-a93d-f52613d0548a
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex465015485df4-b4c6-4280-9871-6f73e30c14dc
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex9251b296e63e-1d89-4b4f-bd2e-f8bb5578da76
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48p-sf42a3851-95e9-4c44-aca1-fff36c6e3a3e
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex2300-cac1f22aa-2662-4df9-81b0-1c91d92995a6
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4550-vc0b071812-7240-4d6f-b650-c80fdc64f84f
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex9214c53d6a75-cba5-4658-8f3f-86e1a91c0dd7
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4200-vccc6ca27b-cda5-41a9-a81e-4c7752a66d75
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48tdc-afi0f62da28-a198-4369-adfe-de2305078130
has environmental constraint1 retained · stored CVE-2023-36844 → juniper · ex4300-48p0a15dd1e-6443-4b12-aae8-578da8502eb7
has vulnerable target scope94 retained · stored CVE-2023-36844 → juniper · junos033cb164-227d-4956-8790-2ef709c54fb104fcdc5e-7662-4234-92a7-df77a9833c8304fd7b8d-0a37-4e26-a78a-017726e347a9079f02f7-023e-4c20-8e4c-f982aefef01008ae2104-0529-4013-b431-ef9b5b3b170c0e855137-718d-42d4-b0d9-c11d418d763d