CVE-2021-0231 Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.

What is CVE-2021-0231?

CVE-2021-0231 is a medium-severity path traversal vulnerability in Juniper Junos, published on 22 Apr 2021. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S3, 20.2R2; This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.

Weakness: CWE-22

Which versions are affected by CVE-2021-0231?

It affects 1 product.

Products include Juniper Junos.

How do I fix CVE-2021-0231?

No fix has been published for CVE-2021-0231 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2021-0231 being exploited?

There is no known exploitation of CVE-2021-0231 in the wild and no public exploit code.

Other vulnerabilities in Juniper Junos

• CVE-2023-36845 Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Exploited Critical 9.8
• CVE-2020-1631 Juniper Junos OS Path Traversal Exploited High 8.8
• CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Exploited Medium 6.7
• CVE-2023-36851 Juniper Junos OS SRX Series Missing Authentication for Critical Function Exploited Medium 5.3
• CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable Modification Exploited Medium 5.3

All Juniper Junos vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xg3m-83f6-pq94.