CVE-2021-0232
High
Description
An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue occurs, the affected Test Agent will not be able to connect to the Control Center. This issue affects Juniper Networks Paragon Active Assurance Control Center All versions prior to 2.35.6; 2.36 versions prior to 2.36.2.
SeverityHigh
CVSS7.4
Exploit probability—
Product
Juniper Paragon Active Assurance Control Center
PublishedApr 22, 2021
First seenApr 22, 2021
Weakness typeCWE-284Improper access control
How to fix
Update
- juniper paragon_active_assurance_control_center2.35.6, 2.36.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper paragon_active_assurance_control_center | v < 2.35.6, 2.36 ≤ v < 2.36.2 | 2.35.6, 2.36.2 |
| fedoraproject fedora | 35 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.