CVE-2020-1606

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2020
Source publication: Jan 15, 2020
Source updated: Sep 17, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Junos OS: Path traversal vulnerability in J-Web

A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission. This issue does not affect system files that can be accessed only by root user. This issue affects Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 14.1X53 versions prior to 14.1X53-D51; 15.1F6 versions prior to 15.1F6-S13; 15.1 versions prior to 15.1R7-S5; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238 on QFX5200/QFX5110 Series; 16.1 versions prior to 16.1R4-S13, 16.1R7-S5; 16.2 versions prior to 16.2R2-S10; 17.1 versions prior to 17.1R3-S1; 17.2 versions prior to 17.2R1-S9, 17.2R3-S2; 17.3 versions prior to 17.3R2-S5, 17.3R3-S5; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S4, 19.1R2.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Junos OS

Vendor: Juniper Networks
Product: Junos OS
Platforms: Unknown
Default status: Unknown

Junos OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
12.3	`affected`	custom	12.3R12-S13	Unavailable	None listed
14.1X53	`affected`	custom	14.1X53-D51	Unavailable	None listed
15.1F6	`affected`	custom	15.1F6-S13	Unavailable	None listed
15.1	`affected`	custom	15.1R7-S5	Unavailable	None listed
16.1	`affected`	custom	16.1R4-S13, 16.1R7-S5	Unavailable	None listed
16.2	`affected`	custom	16.2R2-S10	Unavailable	None listed
17.1	`affected`	custom	17.1R3-S1	Unavailable	None listed
17.2	`affected`	custom	17.2R1-S9, 17.2R3-S2	Unavailable	None listed
17.3	`affected`	custom	17.3R2-S5, 17.3R3-S5	Unavailable	None listed
17.4	`affected`	custom	17.4R2-S9, 17.4R3	Unavailable	None listed
18.1	`affected`	custom	18.1R3-S8	Unavailable	None listed
18.2	`affected`	custom	18.2R3	Unavailable	None listed
18.3	`affected`	custom	18.3R2-S3, 18.3R3	Unavailable	None listed
18.4	`affected`	custom	18.4R2	Unavailable	None listed
19.1	`affected`	custom	19.1R1-S4, 19.1R2	Unavailable	None listed

Junos OS

Vendor: Juniper Networks
Product: Junos OS
Platforms: SRX Series
Default status: Unknown

Junos OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
12.3X48	`affected`	custom	12.3X48-D85	Unavailable	None listed
15.1X49	`affected`	custom	15.1X49-D180	Unavailable	None listed

Junos OS

Vendor: Juniper Networks
Product: Junos OS
Platforms: QFX5200/QFX5110 Series
Default status: Unknown

Junos OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
15.1X53	`affected`	custom	15.1X53-D238	Unavailable	None listed

Junos OS

Vendor: Juniper Networks
Product: Junos OS
Platforms: EX2300/EX3400 Series
Default status: Unknown

Junos OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
15.1X53	`affected`	custom	15.1X53-D592	Unavailable	None listed