CVE-2021-31380 Information disclosure in SRC Series
A remote attacker can exploit a configuration weakness in the JBoss component to disclose sensitive information via crafted queries.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-31380?
CVE-2021-31380 is a medium-severity vulnerability in Juniper Networks SRC Series, published on 19 Oct 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to disclose sensitive information in the HTTP response which allows the attacker to obtain sensitive information.
Which versions are affected by CVE-2021-31380?
It affects 1 product.
Products include Juniper Session and Resource Control.
How do I fix CVE-2021-31380?
No fix has been published for CVE-2021-31380 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-31380 being exploited?
There is no known exploitation of CVE-2021-31380 in the wild and no public exploit code.
Other vulnerabilities in Juniper Networks SRC Series
Sources
Also known as GHSA-6cv6-4x62-cqvr.