CVE-2021-0265
High
Description
An unvalidated REST API in the AppFormix Agent of Juniper Networks AppFormix allows an unauthenticated remote attacker to execute commands as root on the host running the AppFormix Agent, when certain preconditions are performed by the attacker, thus granting the attacker full control over the environment. This issue affects: Juniper Networks AppFormix 3 versions prior to 3.1.22, 3.2.14, 3.3.0.
SeverityHigh
CVSS8.1
Exploit probability—
Product
Juniper Appformix
PublishedApr 22, 2021
First seenApr 22, 2021
How to fix
Update
- juniper appformix3.1.22, 3.2.14 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper appformix | 3.0.0 ≤ v < 3.1.22, 3.2.0 ≤ v < 3.2.14 | 3.1.22, 3.2.14 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.