Juniper Junos OS J-Web external variable

Summaryinfo

A vulnerability was found in Juniper Junos OS. It has been classified as problematic. Affected is an unknown function of the component J-Web. This manipulation causes external variable. This vulnerability is registered as CVE-2023-36844. Remote exploitation of the attack is possible. Furthermore, an exploit is available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Juniper Junos OS (Router Operating System) (unknown version). It has been declared as problematic. Affected by this vulnerability is an unknown code block of the component J-Web. The manipulation with an unknown input leads to a external variable vulnerability. The CWE definition for the vulnerability is CWE-473. A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise. As an impact it is known to affect integrity. The summary by CVE is:

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environments variables. Utilizing a crafted request an attacker is able to modify certain PHP environments variables leading to partial loss of integrity, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on EX Series: * All versions prior to 20.4R3-S9; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R3-S1; * 22.4 versions prior to 22.4R2-S2, 22.4R3.

The weakness was published 08/17/2023 as JSA72300. The advisory is shared at supportportal.juniper.net. This vulnerability is known as CVE-2023-36844 since 06/27/2023. Technical details are unknown but an exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 09/09/2024).

It is declared as attacked. The CISA Known Exploited Vulnerabilities Catalog lists this issue since 11/13/2023 with a due date of 11/17/2023:

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Upgrading eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Router Operating System

Vendor

• Juniper

Name

• Junos OS

License

• commercial

Website

• Vendor: https://www.juniper.net/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion