CWE-300 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-300/ Sun, 26 Feb 2023 06:30:44 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-300 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-300/ 32 32 CVE-2019-14899 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14899/ Sun, 26 Feb 2023 06:30:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14899/ A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and acknowledgement numbers in use, allowing the bad actor […]

The post CVE-2019-14899 appeared first on CVE Vulnerability.

]]> A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and acknowledgement numbers in use, allowing the bad actor to inject data into the TCP stream. This provides everything that is needed for an attacker to hijack active connections inside the VPN tunnel.

The post CVE-2019-14899 appeared first on CVE Vulnerability.

]]> CVE-2022-22156 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-22156/ Thu, 23 Feb 2023 05:02:44 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-22156/ An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrity and confidentiality of the device. The following command can be executed by an administrator via the […]

The post CVE-2022-22156 appeared first on CVE Vulnerability.

]]> An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrity and confidentiality of the device. The following command can be executed by an administrator via the CLI to refresh a script from a remote location, which is affected from this vulnerability: >request system scripts refresh-from (commit | event | extension-service | op | snmp) file filename url This issue affects: Juniper Networks Junos OS All versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2; 21.1 versions prior to 21.1R1-S1, 21.1R2.

The post CVE-2022-22156 appeared first on CVE Vulnerability.

]]>