Juniper Networks Session Smart Conductor.

Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Command injection

Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Path traversal

Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.

• Juniper Networks Session Smart Conductor
• Command injection

Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Other injection

Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials

• Juniper Networks Session Smart Conductor
• Broken access control

Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Command injection

Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• CWE-345

Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Path traversal

Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Other injection

Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Memory corruption

Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Authentication bypass

Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Authentication bypass