Horizon Alert
Summary of the vulnerability and why it matters
The HTTP/HTTPS service in Juniper Junos OS contains a vulnerability that allows unauthorized access to system files and potentially sensitive configuration data. This weakness can enable attackers to read files with general read permissions, including configuration files in newer versions of the operating system. If the J-Web feature is enabled, an attacker could gain the same level of access as an active user, potentially including administrator privileges.
- Vulnerable Juniper Junos OS HTTP/HTTPS services
- Local file inclusion or path traversal flaw
- Unauthorized access to sensitive data
Attack Path
How an attacker could exploit the issue
This vulnerability enables an unauthenticated attacker to gain unauthorized access to systems and data. If the HTTP/HTTPS service is enabled, an attacker can exploit this flaw to read sensitive files, including configuration files, or potentially hijack active J-Web sessions. In instances where an administrator is logged into J-Web, an attacker could gain the same level of access, posing a significant risk to organizational security. This attack can be initiated through network access to the affected devices.
- Required exposure: HTTP/HTTPS services enabled.
- Attacker starting point: Network access.
- Trigger and result: Access to files or sessions.
Live Threat
Current exploitation, exposure, and threat context
A vulnerability exists in Juniper Networks Junos OS devices that could allow an unauthenticated attacker to access sensitive information or execute commands. If the J-Web interface is enabled, an attacker could potentially gain administrative access. While the potential impact is significant, the exploitability varies based on the services enabled on the device. The Cybersecurity and Infrastructure Security Agency (CISA) has identified this vulnerability as actively exploited in the wild.
- Attacker skill: Low
- Required access: Network access
- Business risk: High, treat as urgent
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
This vulnerability may allow an unauthenticated attacker to access sensitive files or execute commands on affected systems. An attacker could gain access to configuration files or, if J-Web is enabled, potentially achieve administrator-level access. This could lead to unauthorized data exposure or system compromise, posing a significant business risk.
- Identify Juniper Junos OS devices with HTTP/HTTPS services enabled.
- Disable HTTP/HTTPS services if not actively used.
- Apply vendor updates and validate the fix.
- Monitor logs for suspicious activity.
