TI-2021-11528 Aliases CVE-2021-31384 GHSA-g6h6-r377-vh4m

Improper authorization in Juniper Junos OS

MEDIUM 45CWE-1220Published 2021-10-19 · Updated 2024-09-16

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-285.

Summary

Due to a Missing Authorization weakness and Insufficient Granularity of Access Control in a specific device configuration, a vulnerability exists in Juniper Networks Junos OS on SRX Series whereby an attacker who attempts to access J-Web administrative interfaces can successfully do so from any device interface regardless of the web-management configuration and filter rules which may otherwise protect access to J-Web. This issue affects: Juniper Networks Junos OS SRX Series 20.4 version 20.4R1 and later versions prior to 20.4R2-S1, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1.

Why it matters now

EPSS 0.01161 67th percentileScored 2026-11-07

Fix Fixed Junos OS (Juniper Networks): 21.1R1-S1, 21.1R2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Juniper	Junos OS	20.4R1 and later; 21.1 to before 21.1R1-S1, 21.1R2	21.1R1-S1, 21.1R2	Patch available	CNA

Junos OS VendorJuniper Affected 20.4R1 and later; 21.1 to before 21.1R1-S1, 21.1R2 Fixed in 21.1R1-S1, 21.1R2 Patch available CNA

CPE configurations NVD · 13

CPE	Versions	Role	Vendor
cpe:2.3:o:juniper:junos:20.4:r1::::::	20.4 r1	Vulnerable	Juniper
cpe:2.3:o:juniper:junos:20.4:r1-s1::::::	20.4 r1-s1	Vulnerable	Juniper
cpe:2.3:o:juniper:junos:20.4:r2::::::	20.4 r2	Vulnerable	Juniper
cpe:2.3:o:juniper:junos:21.1:r1::::::	21.1 r1	Vulnerable	Juniper
cpe:2.3:h:juniper:srx1500:-:::::::*	not specified by NVD	Running on	Juniper
cpe:2.3:h:juniper:srx300:-:::::::*	not specified by NVD	Running on	Juniper
cpe:2.3:h:juniper:srx4100:-:::::::*	not specified by NVD	Running on	Juniper
cpe:2.3:h:juniper:srx4200:-:::::::*	not specified by NVD	Running on	Juniper
cpe:2.3:h:juniper:srx4600:-:::::::*	not specified by NVD	Running on	Juniper
cpe:2.3:h:juniper:srx5400:-:::::::*	not specified by NVD	Running on	Juniper

cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:* Versions 20.4 r1 Vulnerable ·Juniper
cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:* Versions 20.4 r1-s1 Vulnerable ·Juniper
cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:* Versions 20.4 r2 Vulnerable ·Juniper
cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:* Versions 21.1 r1 Vulnerable ·Juniper
cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper

Show 3 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:h:juniper:srx550:-:::::::*	not specified by NVD	Running on	Juniper
cpe:2.3:h:juniper:srx5600:-:::::::*	not specified by NVD	Running on	Juniper
cpe:2.3:h:juniper:srx5800:-:::::::*	not specified by NVD	Running on	Juniper

cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper

Remediation

Fix · CNA Junos OS (Juniper Networks) Fixed in 21.1R1-S1, 21.1R2

Timeline

2026-10-02 Threatist record created from CVE-2021-31384
2026-10-03 Alias added: GHSA-g6h6-r377-vh4m

References

Advisory 1

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11252

Other 1

https://kb.juniper.net/

TI-2023-18638 Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to… KEVCVSS 3.1CRITICAL 9.8
TI-2020-01585 Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services KEVCVSS 3.1CRITICAL 9.8
TI-2015-04610 Assertion failure in ISC BIND named via TKEY queries KEVCVSS 3.1HIGH 7.5
TI-2025-15550 Junos OS: An local attacker with shell access can execute arbitrary code KEVCVSS 4.0MEDIUM 6.7
TI-2023-18644 Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files KEVCVSS 3.1MEDIUM 5.3
TI-2023-18640 Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files KEVCVSS 3.1MEDIUM 5.3

See all 792 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences