A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1.
The following software releases have been updated to resolve this specific issue: Junos Space 19.4R1, and all subsequent releases.
There are no known workarounds for this issue. To reduce the risk of exploitation of these issues, use access lists or firewall filters to limit access to Junos Space to only trusted administrative networks, hosts and users.
| Product | Vulnerable range | Fixed version | Advisory |
|---|---|---|---|
| Juniper Networks Junos Space | >=unspecified<19.4R1 | 19.4R1 | advisory ↗ |