Read the docs
TI-2022-06520 Aliases CVE-2022-22187GHSA-4rjp-pffc-mwxj

JIMS: Local Privilege Escalation vulnerability via repair functionality

Priority LOW 34CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-269.

Summary

An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service (JIMS) allows an unprivileged user to trigger a repair operation. Running a repair operation, in turn, will trigger a number of file operations in the %TEMP% folder of the user triggering the repair. Some of these operations will be performed from a SYSTEM context (started via the Windows Installer service), including the execution of temporary files. An attacker may be able to provide malicious binaries to the Windows Installer, which will be executed with high privilege, leading to a local privilege escalation. This issue affects Juniper Networks Juniper Identity Management Service (JIMS) versions prior to 1.4.0.

Why it matters now

EPSS 0.00287 21st percentileScored 2026-11-07
Fix Fixed Juniper Identity Management Service (JIMS) (Juniper Networks): 1.4.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
JuniperJuniper Identity Management Service (JIMS)before 1.4.01.4.0Patch availableCNA
  • Juniper Identity Management Service (JIMS) VendorJuniper Affected before 1.4.0 Fixed in 1.4.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:juniper:identity_management_service:*:*:*:*:*:windows:*:*before 1.4.0VulnerableJuniper
  • cpe:2.3:a:juniper:identity_management_service:*:*:*:*:*:windows:*:* Versions before 1.4.0 Vulnerable ·Juniper

Remediation

  • Fix · CNA Juniper Identity Management Service (JIMS) (Juniper Networks) Fixed in 1.4.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-22187
  2. 2026-10-03 Alias added: GHSA-4rjp-pffc-mwxj

References

Advisory 2

  • TI-2019-00041 Authentication bypass in Juniper Identity Management Service CVSS 3.1MEDIUM 4.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences