CVE-2020-1677
High
Description
When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.
SeverityHigh
CVSS7.2
Exploit probability—
Product
Juniper Mist Cloud Ui
PublishedOct 16, 2020
First seenOct 16, 2020
Weakness typeCWE-20Improper input validation
How to fix
Update
- juniper mist_cloud_ui2020-09-02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper mist_cloud_ui | v < 2020-09-02 | 2020-09-02 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.