CVE-2020-1675

When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.

View graph Watch Export

CVSS v3.1

8.3 HIGH

EPSS

0.58%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeCHANGED

ConfidentialityLOW

IntegrityLOW

AvailabilityLOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Connections

2 relationships

CWE-299

source

Timeline

disclosure → media coverage

Oct 16, 2020

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024