Juniper Networks Paragon Automation Clickjacking Vulnerability

A clickjacking vulnerability has been identified in the web portal of Juniper Networks Paragon Automation, including the Pathfinder, Planner, and Insights components. This vulnerability arises from the application's failure to implement proper X-Frame-Options and X-Content-Type HTTP headers, allowing attackers to manipulate users into interacting with the interface under their control. All versions of Paragon Automation prior to 24.1.1 are affected.

Impact

Exploitation of this vulnerability could lead to unauthorized interaction with the web portal, allowing attackers to manipulate user actions and potentially access sensitive information or functionalities within the application.

Remediation

Users can upgrade to Paragon Automation version 24.1.1 or any subsequent release to address this vulnerability.