The Juniper Device Manager (JDM) container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes in the world-readable file /etc/passwd. This is not a security best current practice as it can allow an attacker with access to the local filesystem the ability to brute-force decrypt password hashes stored on the system. This issue affects Juniper Networks Junos OS on NFX350: 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2.
Junos OS now stores local password hashes in the protected /etc/shadow file. The following software releases have been updated to resolve this specific issue: Junos OS 19.4R3, 20.1R1-S4, 20.1R2, 20.2R1, and all subsequent releases.
Use access lists or firewall filters to limit access to the device only from trusted hosts. Limit shell access to only trusted system administrators.
| Product | Vulnerable range | Fixed version | Advisory |
|---|---|---|---|
| Juniper Networks Junos OS | >=19.4<19.4R3 | 19.4R3 | advisory ↗ |
| Juniper Networks Junos OS | >=20.1<20.1R1-S4, 20.1R2 | 20.1R1-S4, 20.1R2 | advisory ↗ |