Juniper Releases Security Advisory for Juniper Secure Analytics - 20240103002¶

Overview¶

Juniper released a security advisory to address multiple vulnerabilities affecting Juniper Secure Analytics. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system.

What is vulnerable?¶

Product	Severity	CVSS Score
Juniper Secure Analytics (JSA) Series Virtual Appliance all versions to and including 7.5.0 UP7.	Critical	9.8

What has been observed¶

This issue was discovered during external security research. Juniper SIRT is not aware of any malicious exploitation of this vulnerability.

Recommendation¶

The WA SOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframe of one month... (refer Patch Management):

https://supportportal.juniper.net/s/article/2023-12-Security-Bulletin-JSA-Series-Multiple-vulnerabilities-resolved?language=en_US

Additional References¶

CISA Cybersecurity Alerts & Advisories: https://www.cisa.gov/news-events/cybersecurity-advisories