CVE-2018-0025 Junos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User Authentication

Medium 6.1 Published 11 Jul 2018 Updated 16 Sep 2024

Attackers can capture user credentials via man-in-the-middle attacks when HTTP/HTTPS pass-through authentication is enabled on Juniper SRX devices.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2018-0025?

CVE-2018-0025 is a medium-severity vulnerability in Juniper Junos, published on 11 Jul 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials in the initial HTTP/HTTPS session is at risk that these credentials may be captured during follow-on HTTP/HTTPS requests by a malicious actor through a man-in-the-middle attack or by authentic servers subverted by malicious actors. FTP, and Telnet pass-through authentication services are not affected. Affected releases are Juniper Networks SRX Series: 12.1X46 versions prior to 12.1X46-D67 on SRX Series; 12.3X48 versions prior to 12.3X48-D25 on SRX Series; 15.1X49 versions prior to 15.1X49-D35 on SRX Series.

Weakness: CWE-319, CWE-300

Which versions are affected by CVE-2018-0025?

It affects 1 product.

Products include Juniper Junos.

How do I fix CVE-2018-0025?

No fix has been published for CVE-2018-0025 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-0025 being exploited?

There is no known exploitation of CVE-2018-0025 in the wild and no public exploit code.

All Juniper Junos vulnerabilities

Sources

Also known as GHSA-2g26-r5g4-jhv2.