CVE-2020-1675

HIGH

Juniper Networks Mist Cloud UI <September 2 2020 - Info Disclosure

Title source: llm

Description

When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://kb.juniper.net/JSA11072

Scores

CVSS v3 8.3

EPSS 0.0009

EPSS Percentile 25.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Details

CWE

CWE-295 CWE-299

Status published

Products (1)

juniper/mist_cloud_ui < 2020-09-02

Published Oct 16, 2020

Tracked Since Feb 18, 2026