CVE-2020-1675: juniper networks mist cloud ui
Vulnerability summary
CVE-2020-1675 is a high (CVSS 8.3) vulnerability in juniper networks mist cloud ui. EPSS estimates a 0.58% chance of exploitation in the next 30 days, higher than 46.6% of scored vulnerabilities.
Timeline
- 16-10-2020PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST8.3HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
EPSS trend
Probability
0.58%
Chance of exploitation in the next 30 days
Percentile
47%
Versus all other CVEs
30-day change
0.00 pp
From 0.58% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-299Improper Check for Certificate RevocationThe product does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a certificate that has been compromised.
- CWE-295Improper Certificate ValidationThe product does not validate, or incorrectly validates, a certificate.
Affected systems
Juniper1 product
- mist_cloud_ui< 2020-09-02
Juniper networks1 product
- mist cloud ui≥ unspecified, < 09/02/2020
2 vendors · 2 products