Support Us — Your donation helps us keep running

Goal: 1000 CNY,Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-1675
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.
Source: NVD (National Vulnerability Database)
Vulnerability Description
When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
证书撤销验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mist Cloud 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Mist Cloud是美国瞻博网络(Juniper Networks)公司的一个简化云管理并帮助用户防止供应商和复杂性锁定的平台。它为跨公有和私有云,Docker容器和KVM虚拟机管理程序的服务器提供成本和使用情况报告,RBAC,管理,供应,编排,监控和自动化。 Juniper Networks Mist Cloud UI 存在信任管理问题漏洞,该漏洞源于当安全断言标记语言(SAML)身份验证被启用时,可能会错误地处理无效的身份验证证书,攻击者可利用该漏洞访问未经授权的数
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
Juniper NetworksMIST Cloud UI unspecified ~ 09/02/2020 -
II. Public POCs for CVE-2020-1675
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2020-1675
Please Login to view more intelligence information
New Vulnerabilities
V. Comments for CVE-2020-1675

No comments yet


Leave a comment