CVE-2019-0042
Medium
Description
Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network.
SeverityMedium
CVSS4.2
Exploit probability—
Product
Juniper Identity Management Service
PublishedApr 10, 2019
First seenApr 10, 2019
Weakness typeCWE-404CWE-404CWE-305CWE-305CWE-669CWE-669
How to fix
Update
- juniper identity_management_service1.1.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper identity_management_service | v < 1.1.4 | 1.1.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.