CVE-2025-59968

Medienbericht

EPSS 0.04%
Veröffentlicht 09.10.2025 15:48:08
Zuletzt bearbeitet 23.01.2026 19:59:41
Quelle sirt@juniper.net
CVE-Watchlists
Login
Unerledigt
Login

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface. 




Tampering with this metadata can result in managed SRX Series devices permitting network traffic that should otherwise be blocked by policy, effectively bypassing intended security controls.



This issue affects Junos Space Security Director 
  *   all versions prior to 24.1R3 Patch V4


This issue does not affect managed cSRX Series devices.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Space Security Director Version < 24.1

   Juniper ≫ Vsrx Version-
   Juniper ≫ Srx1500 Version-
   Juniper ≫ Srx1600 Version-
   Juniper ≫ Srx2300 Version-
   Juniper ≫ Srx300 Version-
   Juniper ≫ Srx320 Version-
   Juniper ≫ Srx340 Version-
   Juniper ≫ Srx345 Version-
   Juniper ≫ Srx380 Version-
   Juniper ≫ Srx4100 Version-
   Juniper ≫ Srx4120 Version-
   Juniper ≫ Srx4200 Version-
   Juniper ≫ Srx4300 Version-
   Juniper ≫ Srx4600 Version-
   Juniper ≫ Srx4700 Version-
   Juniper ≫ Srx5400 Version-
   Juniper ≫ Srx5600 Version-
   Juniper ≫ Srx5800 Version-

Juniper ≫ Space Security Director Version24.1 Updater1

Juniper ≫ Space Security Director Version24.1 Updater2

Juniper ≫ Space Security Director Version24.1 Updater3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.135

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
sirt@juniper.net	7.7	0	0	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Green
sirt@juniper.net	8.6	3.9	4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://www.heise.de/news/Juniper-Security-Director-Angreifer-koennen-Sicherheitsmechanismus-umgehen-10750030.html

Medienbericht

heise Security

10.10.2025 13:57

https://supportportal.juniper.net/JSA103157

Vendor Advisory

https://www.juniper.net/documentation/us/en/software/nm-apps24.1/junos-space-security-director/topics/task/junos-space-metadata-creating.html

Technical Description

https://nvd.nist.gov/vuln/detail/CVE-2025-59968

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-59968

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-59968

EUVD