Juniper Networks Junos Space TLS/SSL Server Static Key Cipher Vulnerability

A vulnerability in the TLS/SSL server of Juniper Networks Junos Space, present in all versions prior to 24.1R5, allows the use of static key ciphers. This reduces the confidentiality of on-path traffic and does not support Perfect Forward Secrecy, impacting the long-term confidentiality of encrypted communications.

Impact

The use of static key ciphers in the TLS/SSL server reduces the confidentiality of on-path traffic and long-term encrypted communications, as these ciphers do not support Perfect Forward Secrecy.

Remediation

Users can upgrade to Junos Space version 24.1R5 or later to address this vulnerability. Ensure that any clients connecting to the device do not allow negotiation of static RSA key exchange.