What’s Vulnerable › Vulnerabilities

CVE-2019-0042: Incorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devices

• Severity: medium (CVSS 4.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-04-10 · updated 2026-06-17
• Weakness: CWE-305

Description

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network.

Affected products

• Juniper Networks Juniper Identity Management Service (JIMS): before 1.1.4 — fixed in 1.1.4

How to fix

Upgrade to a fixed version: Juniper Networks Juniper Identity Management Service (JIMS) 1.1.4. Check the vendor advisory for mitigations.

References

• https://kb.juniper.net/JSA10934
• https://kb.juniper.net/JSA10934

Get alerted when CVE-2019-0042 or the next vulnerability affects your stack