Juniper Junos SRX Series CVE-2015-3002 Local Security Bypass Vulnerability

Bugtraq ID:	74019
Class:	Design Error
CVE:	CVE-2015-3002
Remote:	No
Local:	Yes
Published:	Apr 09 2015 12:00AM
Updated:	Apr 09 2015 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Juniper Junos 12.1X47-D15 Juniper Junos 12.1X47-D11 Juniper Junos 12.1X47-D10 Juniper JUNOS 12.1X47 D10 Juniper JUNOS 12.1X46-D25 Juniper Junos 12.1X46-D20.5 Juniper Junos 12.1X46-D20 Juniper Junos 12.1X46-D15 Juniper Junos 12.1X46-D10 Juniper Junos 12.1X46 D25 Juniper JUNOS 12.1X46 D20 Juniper JUNOS 12.1X46 D15 Juniper Junos 12.1X46 D10 Juniper JUNOS 12.1X46 -D10 Juniper JUNOS 12.1X44-D40 Juniper Junos 12.1X44-D35 Juniper Junos 12.1X44-D34 Juniper Junos 12.1X44-D32 Juniper Junos 12.1X44-D30.4 Juniper Junos 12.1X44-D30 Juniper Junos 12.1X44-D26 Juniper JUNOS 12.1X44-D25 Juniper Junos 12.1X44-D20.3 Juniper JUNOS 12.1X44-D20 Juniper JUNOS 12.1X44-D15 Juniper JUNOS 12.1X44 D40 Juniper JUNOS 12.1X44 D35 Juniper Junos 12.1X44 D30 Juniper JUNOS 12.1X44 D25 Juniper Junos 12.1X44 D20 Juniper JUNOS 12.1X44 D15 Juniper Junos 12.1X44 D10
Not Vulnerable:	Juniper Junos 12.3X48-D10 Juniper Junos 12.1X47-D20 Juniper Junos 12.1X46-D30 Juniper Junos 12.1X44-D45

Juniper Junos SRX Series CVE-2015-3002 Local Security Bypass Vulnerability

Juniper Junos is prone to a local security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions.

Juniper Junos SRX Series CVE-2015-3002 Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Juniper Junos SRX Series CVE-2015-3002 Local Security Bypass Vulnerability

References:

• Juniper HomePage (Juniper)
  
• 2015-04 Security Bulletin: SRX Series: disconnecting from console may not automa (Juniper)