CVE-2020-1611 Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.
An attacker can view all files on the device by sending malicious HTTP packets to Junos Space.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-1611?
CVE-2020-1611 is a medium-severity path traversal vulnerability in Juniper Junos Space, published on 15 Jan 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1.
Which versions are affected by CVE-2020-1611?
It affects 1 product.
Products include Juniper Junos Space.
How do I fix CVE-2020-1611?
No fix has been published for CVE-2020-1611 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2020-1611 being exploited?
There is no known exploitation of CVE-2020-1611 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Juniper Junos Space
Sources
Also known as GHSA-3wvp-p4cg-5fwm.