CVE-2020-1677

Katalog CVE

CVSS 7.2 · High EPSS 0,43%

Kerentanan Improper Input Validation pada juniper mist cloud ui. Skor CVSS 3.1 7.2 (High) menurut juniper.net.

Deskripsi (NVD)

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.

Rincian

Terbit di NVD

16 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber juniper.net
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-345: Insufficient Verification of Data Authenticity

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 34,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://kb.juniper.net/JSA11072 advisory vendor