Vulnerability Database

290,476

Total vulnerabilities in the database

CVE-2019-0015

A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. A deleted dynamic VPN connection should be immediately disallowed from establishing new VPN connections. Due to an error in token caching, deleted users are allowed to connect once a previously successful dynamic VPN connection has been established. A reboot is required to clear the cached authentication token. Affected releases are Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D75; 15.1X49 versions prior to 15.1X49-D150; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.

  • Published: Jan 15, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-0015
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
juniper / junos 12.3x48-d15 12.3x48-d15.x
juniper / junos 12.3x48-d35 12.3x48-d35.x
juniper / junos 12.3x48-d50 12.3x48-d50.x
juniper / junos 12.3x48-d30 12.3x48-d30.x
juniper / junos 12.3x48-d25 12.3x48-d25.x
juniper / junos 12.3x48-d45 12.3x48-d45.x
juniper / junos 12.3x48-d55 12.3x48-d55.x
juniper / junos 12.3x48-d20 12.3x48-d20.x
juniper / junos 12.3x48-d10 12.3x48-d10.x
juniper / junos 12.3x48-d40 12.3x48-d40.x
juniper / junos 12.3x48-d60 12.3x48-d60.x
juniper / junos 12.3x48-d65 12.3x48-d65.x
juniper / junos 12.3x48-d70 12.3x48-d70.x
juniper / junos 12.3x48-d66 12.3x48-d66.x
juniper / junos 12.3x48-d51 12.3x48-d51.x
juniper / junos 12.3x48 12.3x48.x
juniper / junos 12.3x48-d100 12.3x48-d100.x
juniper / junos 15.1x49 15.1x49.x
juniper / junos 15.1x49-d131 15.1x49-d131.x
juniper / junos 15.1x49-d25 15.1x49-d25.x
juniper / junos 15.1x49-d140 15.1x49-d140.x
juniper / junos 15.1x49-d120 15.1x49-d120.x
juniper / junos 15.1x49-d130 15.1x49-d130.x
juniper / junos 15.1x49-d110 15.1x49-d110.x
juniper / junos 15.1x49-d60 15.1x49-d60.x
juniper / junos 15.1x49-d20 15.1x49-d20.x
juniper / junos 15.1x49-d10 15.1x49-d10.x
juniper / junos 15.1x49-d55 15.1x49-d55.x
juniper / junos 15.1x49-d15 15.1x49-d15.x
juniper / junos 15.1x49-d40 15.1x49-d40.x
juniper / junos 15.1x49-d35 15.1x49-d35.x
juniper / junos 15.1x49-d45 15.1x49-d45.x
juniper / junos 15.1x49-d75 15.1x49-d75.x
juniper / junos 15.1x49-d65 15.1x49-d65.x
juniper / junos 15.1x49-d90 15.1x49-d90.x
juniper / junos 15.1x49-d100 15.1x49-d100.x
juniper / junos 15.1x49-d50 15.1x49-d50.x
juniper / junos 15.1x49-d30 15.1x49-d30.x
juniper / junos 15.1x49-d70 15.1x49-d70.x
juniper / junos 15.1x49-d80 15.1x49-d80.x
juniper / junos 17.3-r1 17.3-r1.x
juniper / junos 17.3-r2 17.3-r2.x
juniper / junos 17.3-r2-s2 17.3-r2-s2.x
juniper / junos 17.3-r2-s1 17.3-r2-s1.x
juniper / junos 17.3-r1-s4 17.3-r1-s4.x
juniper / junos 17.3-r2-s5 17.3-r2-s5.x
juniper / junos 17.3-r2-s3 17.3-r2-s3.x
juniper / junos 17.3-r1-s1 17.3-r1-s1.x
juniper / junos 17.3-r2-s4 17.3-r2-s4.x
juniper / junos 17.3 17.3.x
juniper / junos 17.4-r1-s5 17.4-r1-s5.x
juniper / junos 17.4-r1-s7 17.4-r1-s7.x
juniper / junos 17.4-r1-s4 17.4-r1-s4.x
juniper / junos 17.4-r1-s6 17.4-r1-s6.x
juniper / junos 17.4-r1-s3 17.4-r1-s3.x
juniper / junos 17.4-r1-s1 17.4-r1-s1.x
juniper / junos 17.4-r1-s2 17.4-r1-s2.x
juniper / junos 17.4 17.4.x
juniper / junos 17.4-r1 17.4-r1.x
juniper / junos 18.1-r1 18.1-r1.x
juniper / junos 18.1 18.1.x
juniper / junos 18.1-r2-s1 18.1-r2-s1.x
juniper / junos 18.1-r2-s4 18.1-r2-s4.x
juniper / junos 18.1-r2-s2 18.1-r2-s2.x
juniper / junos 18.1-r2 18.1-r2.x
juniper / junos 18.1-r 18.1-r.x
juniper / junos 18.2-r 18.2-r.x
juniper / junos 18.2-r1-s2 18.2-r1-s2.x
juniper / junos 18.2-r1-s4 18.2-r1-s4.x
juniper / junos 18.2-r1-s5 18.2-r1-s5.x
juniper / junos 18.2-r1 18.2-r1.x
juniper / junos 18.2 18.2.x
juniper / junos 18.2-r1-s3 18.2-r1-s3.x