CVE-2019-0015 Junos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot

Medium 5.4 Published 15 Jan 2019 Updated 16 Sep 2024

Deleted dynamic VPN users can bypass authentication and establish connections until the device is rebooted due to token caching errors.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-0015?

CVE-2019-0015 is a medium-severity authentication bypass vulnerability in Juniper Junos, published on 15 Jan 2019. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. A deleted dynamic VPN connection should be immediately disallowed from establishing new VPN connections. Due to an error in token caching, deleted users are allowed to connect once a previously successful dynamic VPN connection has been established. A reboot is required to clear the cached authentication token. Affected releases are Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D75; 15.1X49 versions prior to 15.1X49-D150; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.

Weakness: CWE-613

Which versions are affected by CVE-2019-0015?

It affects 1 product.

Products include Juniper Junos.

How do I fix CVE-2019-0015?

No fix has been published for CVE-2019-0015 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2019-0015 being exploited?

There is no known exploitation of CVE-2019-0015 in the wild and no public exploit code.

All Juniper Junos vulnerabilities

Sources

Also known as GHSA-c5qw-pgmj-mr6g.