| Package | Affected versions | Patched versions |
|---|---|---|
| session and resource control | < 4.130r6 | 4.130r6 |
An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers, which could allow a remote attacker to obtain sensitive information. A remote attacker with read and write access to network data could exploit this vulnerability to display plaintext bits from a block of ciphertext and obtain sensitive information. This issue affects all Juniper Networks SRC Series versions prior to 4.13.0-R6.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free