CVE-2021-0246

Summary

CVE	CVE-2021-0246
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-04-22 20:15:00 UTC
Updated	2021-04-27 17:41:00 UTC
Description	On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, devices using tenant services on Juniper Networks Junos OS, due to incorrect default permissions assigned to tenant system administrators a tenant system administrator may inadvertently send their network traffic to one or more tenants while concurrently modifying the overall device system traffic management, affecting all tenants and the service provider. Further, a tenant may inadvertently receive traffic from another tenant. This issue affects: Juniper Networks Junos OS 18.3 version 18.3R1 and later versions on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2; 18.3 versions prior to 18.3R3 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2; 18.4 versions prior to 18.4R2 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3; 19.1 versions prior to 19.1R2 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3. This issue does not affect: Juniper Networks Junos OS versions prior to 18.3R1.

Problem Types: CWE-276

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Juniper	Junos	18.3	-	All	All
Operating System	Juniper	Junos	18.3	r1	All	All
Operating System	Juniper	Junos	18.3	r1-s1	All	All
Operating System	Juniper	Junos	18.3	r1-s2	All	All
Operating System	Juniper	Junos	18.3	r1-s3	All	All
Operating System	Juniper	Junos	18.3	r1-s4	All	All
Operating System	Juniper	Junos	18.3	r1-s5	All	All
Operating System	Juniper	Junos	18.3	r1-s6	All	All
Operating System	Juniper	Junos	18.3	r2	All	All
Operating System	Juniper	Junos	18.3	r2-s1	All	All
Operating System	Juniper	Junos	18.3	r2-s2	All	All
Operating System	Juniper	Junos	18.3	r2-s3	All	All
Operating System	Juniper	Junos	18.3	r2-s4	All	All
Operating System	Juniper	Junos	18.4	-	All	All
Operating System	Juniper	Junos	18.4	r1	All	All
Operating System	Juniper	Junos	18.4	r1-s1	All	All
Operating System	Juniper	Junos	18.4	r1-s2	All	All
Operating System	Juniper	Junos	18.4	r1-s3	All	All
Operating System	Juniper	Junos	18.4	r1-s4	All	All
Operating System	Juniper	Junos	18.4	r1-s5	All	All
Operating System	Juniper	Junos	18.4	r1-s6	All	All
Operating System	Juniper	Junos	18.4	r1-s7	All	All
Operating System	Juniper	Junos	19.1	-	All	All
Operating System	Juniper	Junos	19.1	r1	All	All
Operating System	Juniper	Junos	19.1	r1-s1	All	All
Operating System	Juniper	Junos	19.1	r1-s2	All	All
Operating System	Juniper	Junos	19.1	r1-s3	All	All
Operating System	Juniper	Junos	19.1	r1-s4	All	All
Operating System	Juniper	Junos	19.1	r1-s5	All	All
Hardware	Juniper	Srx1500	-	All	All	All
Hardware	Juniper	Srx4100	-	All	All	All
Hardware	Juniper	Srx4200	-	All	All	All
Hardware	Juniper	Srx4600	-	All	All	All
Hardware	Juniper	Srx5400	-	All	All	All
Hardware	Juniper	Srx5600	-	All	All	All
Hardware	Juniper	Srx5800	-	All	All	All

Reference	Source	Link	Tags
2021-04 Security Bulletin: Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other tenant networks or gather information from other networks. (CVE-2021-0246) - Juniper Networks	MISC	kb.juniper.net
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.