CVE-2025-52950 Juniper Security Director: Insufficient authorization for multiple endpoints in web interface
Unauthenticated attackers can read or modify sensitive resources in Juniper Security Director due to missing authorization checks on web endpoints.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-52950?
CVE-2025-52950 is a medium-severity missing authorization vulnerability in Juniper Security Director, published on 11 Jul 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A Missing Authorization vulnerability in Juniper Networks Security Director allows an unauthenticated network-based attacker to read or tamper with multiple sensitive resources via the web interface.
Numerous endpoints on the Juniper Security Director appliance do not validate authorization and will deliver information to the caller that is outside their authorization level. An attacker can access data that is outside the user's authorization level. The information obtained can be used to gain access to additional information or perpetrate other attacks, impacting downstream managed devices.
This issue affects Security Director version 24.4.1.
Weakness: CWE-862
Which versions are affected by CVE-2025-52950?
It affects 1 product.
Products include Juniper Security Director.
How do I fix CVE-2025-52950?
No fix has been published for CVE-2025-52950 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-52950 being exploited?
There is no known exploitation of CVE-2025-52950 in the wild and no public exploit code.
Sources
Also known as GHSA-f73w-2j5r-rcr4.