Paragon Active Assurance: Authentication bypass vulnerability in Control Center

An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue occurs, the affected Test Agent will not be able to connect to the Control Center. This issue affects Juniper Networks Paragon Active Assurance Control Center All versions prior to 2.35.6; 2.36 versions prior to 2.36.2.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

访问控制不恰当

Juniper Networks Paragon 访问控制错误漏洞

Juniper Networks Paragon是美国Juniper公司的一个应用软件。一个实时网络拓扑视图。 Paragon Active Assurance Control Center 2.36版本存在访问控制错误漏洞，该漏洞允许远程攻击者可利用该漏洞绕过身份验证过程。以下产品及版本受到影响：Paragon Active Assurance Control Center: 2.36。

N/A

N/A