CVE-2025-59968

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space Security Director versions prior to 24.1R3 Patch V4

Description A missing authorization issue exists in Juniper Networks Junos Space Security Director. An unauthenticated network-based attacker can read or modify metadata through the web interface. Modifying this metadata can lead to managed SRX Series devices allowing network traffic that should be blocked by policy, bypassing security controls. This issue does not affect managed cSRX Series devices.

Recommendations Update to Junos Space Security Director version 24.1R3 Patch V4 or later.