Threats tagged 'ghsa-mw3r-9657-3g58'

An Improper Link Resolution Before File Access ('Link Following') vulnerability exists in the unauthenticated web server handlers of Juniper Networks Session Smart Router and Session Smart Conductor. This flaw allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints. The vulnerability affects Mist-managed routers and unmanaged routers not onboarded to a Conductor, while routers managed by Conductor are not affected.