A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.
With a specific request to
webauth_operation.php
that doesn't require authentication, an attacker is able to upload and download arbitrary files via J-Web, leading to a loss of
integrity or confidentiality, which may allow chaining to other vulnerabilities.
This issue affects Juniper Networks Junos OS on SRX Series:
*
21.2 versions prior to 21.2R3-S8;
* 21.4
versions prior to
21.4R3-S6;
* 22.1
versions prior to
22.1R3-S5;
* 22.2
versions prior to
22.2R3-S3;
* 22.3
versions prior to
22.3R3-S2;
* 22.4 versions prior to 22,4R2-S2, 22.4R3;
* 23.2 versions prior to
23.2R1-S2, 23.2R2.
Connections 79
has cited scope1 retained · stored CVE-2023-36851 → Juniper Networks · Junos OSabe5afef-99f0-4e5c-9ca0-04ba35790480
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-mp5884c435-12be-446d-b2c6-75c8c9e52994
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4600-vc27d159b8-fbad-4ab0-af5e-23f53d3a2a76
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx110ee580a04-e710-45c7-9825-e5f1bda537c1
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-48tdc748fdb55-dca0-49dc-b506-b9ff59149a1b
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300dfcc2734-5735-4788-b447-520e440bb4de
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-48t-dc98a1869e-5eae-4ff2-8a40-a5fd595556e1
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex2300-48mp213d2cc8-0e74-4c35-9d8f-f29264fd8866
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex821656dbf12f-0d87-42e8-807b-f877fb7b9e8f
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex92089cae5015-1049-43d5-81c9-2f813ea92979
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx400021271609-fd1a-484b-b26a-8ea74d554d23
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex3300718ed6f4-ed2b-4f6b-a41c-eade2aa9b0b6
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-48mp720e01e2-4092-44f1-8032-224c45cc213c
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx3808642bc6a-01e5-4c80-ad79-98f3b38011f6
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex2300-24t91fab222-130b-4f6e-bed8-73c0bc93fa17
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex2200-vc8436b2f4-a404-4572-9bb1-6cc31021cf61
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex925349cbc2f1-8fea-4ac5-ac2e-46d60ebcb947
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex920484592dc3-5c50-495e-b8d0-be87a2110291
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx345f3f16a1a-ecd8-4b8e-8810-e95c61434324
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4500e8df7839-3f36-4535-8c56-50e9376f154c
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-48t-dc-afi75935bf6-31c8-41f4-a75f-afe780e54508
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx6509d40d373-e6ae-4fa0-8d1d-badebcd2ae4a
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx550_hm1ddd4adf-307e-4abf-bb1b-ae1774ac8625
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx15009b0d6cf5-9023-4304-9c86-cd92231b8891
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex44007fcf20a6-76f8-4168-93df-32360aaedf68
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx58003f7aad52-7476-4807-b5c3-15ad898806d6
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex2300-24mp24c0454f-8223-4fed-b91a-118abda678cd
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4500-vc13da9c41-03b2-47d7-a3c0-151bfe365acc
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx240h222652f34-97f3-4d43-8a3e-b24fc211064f
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex8200091cd498-2b35-407b-b06d-878b9eb59004
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx34058748f85-6ab1-444c-826e-b4497decf9d4
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-32f-sd16852ef-dad1-40bf-ac71-179c9d1498b0
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex2300m0c16cbe0-a017-4793-9f0e-8ffb42252dc7
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex8200-vc05fef7f5-8e0a-4ae9-92b1-545e4747bb81
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-32f72b20755-88ea-4e33-a7cc-766fb0fa68bd
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-24t-sf298c2e2-21cc-4cf0-843b-5fe81985986e
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex460092207845-74ac-45c5-808c-4547568709e3
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-24p-s017dfc82-c881-415d-9f69-e9e79e326e23
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx56008caae31a-e893-41ac-9896-87b01fe44c34
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex2300af9409e1-d18b-45b0-ba4f-08913041be63
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx4200a953939e-2db3-4149-bee6-36e4bffe0af4
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx2105c3317c6-09c8-4517-8932-75a14fdad1c6
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-48tafi2486918d-89a0-41fa-8c37-8c3c68d41d57
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-48mp-sb70ea27e-5410-4aed-8792-064888ecb237
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx3206c426df5-3086-416a-9316-efeadf4e7f56
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex320075a1ffa5-285e-448b-bafe-c9138d7a54df
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx36002dcf3d6a-c0bb-413f-aafd-3ef9e45b98eb
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex2200-c6e5fdb24-c17f-486c-a99b-8479f6995ae0
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex2300-48pee985b0b-a403-4b75-9278-ee992595a32c
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx300e27cda6d-83db-43c6-a856-064f4af8a35c
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex34000fc50138-2977-4e4c-9b5f-9d728699d89e
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-24p085d9047-0387-487c-826d-06e4ecf3f909
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300m709bc7d8-2d14-4f44-9fe6-c0cf97133426
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex42003c53594d-1651-41bf-88e6-56967a5f3ba7
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx5500ca45dca-b2a1-4676-b74e-4f5aec052859
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx4600d1b6c5d5-643d-414a-bd17-410cf1713070
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx550mc5b53f82-8acb-4c52-bf2d-b8dd1f209a39
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-48t-sf2213e5c-7f2f-4e08-b47c-051ea730f56d
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex9250637f7310-c39a-4d60-adca-8f2717e2509c
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4550/vcf272fb13-f541-4da1-93ed-2744519c3d22
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx5400966118e3-5c0c-4b1a-8e83-9720d01962ea
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx100190a0c8e-cdf6-49af-ba55-d5e51a9b884e
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex2300-24pd4c95d14-fc28-4f43-900d-7e9ff10a54e2
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx22041da5c79-0152-40c8-ad6d-c54a0103fc4b
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-48t5544e47b-6771-480c-92e2-e401f34b07cc
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex3300-vca10e68b2-0fcc-4457-8eb0-2a41a2ce5a80
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx4100244231e4-0d3c-408a-9997-99e0810baeed
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex920014fe2343-b5df-4db7-8c62-2c9a67bc2496
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-24tba7632c1-a570-4b2c-b2bf-3256f42df2eb
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex2200adf88834-8720-4405-aed6-1710e58403df
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex621015afee60-495e-4a05-9f38-d4e2f5ef51aa
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4550938e625b-dd03-48ee-9d7f-6850e6a38714
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex2300-48tdb835a84-3ed5-4fc9-a1bf-0a718605c4e4
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-32f-dc912d6b3c-6eb8-42a9-9435-5c604c3a9045
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex62003e1c10c1-05ad-4bf8-896e-cd7ba0afcf85
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex4300-48t-afia31e4776-2a90-4ee3-9925-043af16b5d6d
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · srx1400b6f96462-102c-42d8-8c2d-a591523f8b5c
has environmental constraint1 retained · stored CVE-2023-36851 → juniper · ex8208f39dfbd3-7101-48b0-b512-b7621b187b14
has vulnerable target scope62 retained · stored CVE-2023-36851 → juniper · junos026678cb-1db6-4a3d-860b-3ec4d4468f60069a3ae8-03af-44ac-8513-77d70003a5020d4b341c-4b50-45c4-92d4-18d13eebd99f112ad56c-bdbc-45fc-9584-28b766447ddc16dea3b9-f157-4f5d-89ec-aa3f24519fbc17c2a53e-0a67-403d-9f37-9b8778de486b