Vulnerability Database

291,049

Total vulnerabilities in the database

CVE-2019-0054

An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.

  • Published: Oct 9, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-0054
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.4
  • AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
juniper / junos 15.1x49-d50 15.1x49-d50.x
juniper / junos 15.1x49-d30 15.1x49-d30.x
juniper / junos 15.1x49-d70 15.1x49-d70.x
juniper / junos 15.1x49-d80 15.1x49-d80.x
juniper / junos 15.1x49-d110 15.1x49-d110.x
juniper / junos 15.1x49-d60 15.1x49-d60.x
juniper / junos 15.1x49-d100 15.1x49-d100.x
juniper / junos 15.1x49-d35 15.1x49-d35.x
juniper / junos 15.1x49-d45 15.1x49-d45.x
juniper / junos 15.1x49-d75 15.1x49-d75.x
juniper / junos 15.1x49-d65 15.1x49-d65.x
juniper / junos 15.1x49-d90 15.1x49-d90.x
juniper / junos 15.1x49-d40 15.1x49-d40.x
juniper / junos 15.1x49-d20 15.1x49-d20.x
juniper / junos 15.1x49-d10 15.1x49-d10.x
juniper / junos 15.1x49-d55 15.1x49-d55.x
juniper / junos 15.1x49 15.1x49.x