Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Juniper Networks MIST Cloud UI 09/02/2020 Clear all filters
TI-2020-01624 CVE-2020-1677 · GHSA-wx4h-wgr2-66h2

Juniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability.

Priority LOW 32

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptogra…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00425 Published 2020-10-16 Fixed in 09/02/2020 CWE-20
TI-2020-01623 CVE-2020-1676 · GHSA-4fg4-5r24-wpff

Juniper Networks Mist Cloud UI: SAML authentication response handling vulnerability.

Priority LOW 33

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00887 Published 2020-10-16 Fixed in 09/02/2020 CWE-20
TI-2020-01622 CVE-2020-1675 · GHSA-fw35-7jfq-3g5m

Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.

Priority LOW 37

When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to a…

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.00581 Published 2020-10-16 Fixed in 09/02/2020 CWE-299