Product:
Junos Space
Summary
An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access any file on the file system. This vulnerability can expose sensitive information that is typically restricted from low-privileged users. It affects all versions of Junos Space before 24.1R3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2025-59976 |
Exploitation
To exploit this vulnerability, an attacker must be authenticated and can use specially crafted GET requests to access files outside the normal file path restrictions imposed by the JBoss daemon. By manipulating the GET method, the attacker can retrieve sensitive files from the system, potentially leading to unauthorized access to confidential information.
Affected Products
- Junos Space: All versions prior to 24.1R3 are affected by this vulnerability.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to Junos Space version 24.1R3 or later. Additionally, organizations should implement strict access controls and monitor network traffic for any unauthorized access attempts to the web interface.