Juniper Networks Junos Space Arbitrary File Download Vulnerability

A vulnerability allowing arbitrary file downloads has been identified in the web interface of Juniper Networks Junos Space, affecting all versions prior to 24.1R3. This vulnerability allows a network-based authenticated attacker to use a crafted GET request to access any file on the file system. Exploitation of this vulnerability could lead to unauthorized access to sensitive information typically restricted from low-privileged users.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive files, potentially exposing information that should be restricted from low-privileged users.