Vulnerabilities > Juniper > Mist Cloud UI

DATE CVE VULNERABILITY TITLE RISK
2020-10-16 CVE-2020-1677 Insufficient Verification of Data Authenticity vulnerability in Juniper Mist Cloud UI
When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls.
network
low complexity
juniper CWE-345
7.2
2020-10-16 CVE-2020-1676 Unspecified vulnerability in Juniper Mist Cloud UI
When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls.
network
low complexity
juniper
7.2
2020-10-16 CVE-2020-1675 Improper Certificate Validation vulnerability in Juniper Mist Cloud UI
When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data.
network
low complexity
juniper CWE-295
8.3