What’s Vulnerable › Vulnerabilities

CVE-2021-0265: Contrail Insights: The REST API implementation allows an unauthenticated remote attacker to execute commands as root.

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-04-22 · updated 2026-06-17
• Weakness: CWE-78

Description

An unvalidated REST API in the AppFormix Agent of Juniper Networks AppFormix allows an unauthenticated remote attacker to execute commands as root on the host running the AppFormix Agent, when certain preconditions are performed by the attacker, thus granting the attacker full control over the environment. This issue affects: Juniper Networks AppFormix 3 versions prior to 3.1.22, 3.2.14, 3.3.0.

Affected products

• Juniper Networks AppFormix: from 3.0.0 before 3.1.22; from 3.2.0 before 3.2.14 — fixed in 3.1.22, 3.2.14

How to fix

Upgrade to a fixed version: Juniper Networks AppFormix 3.1.22, 3.2.14. Check the vendor advisory for mitigations.

References

• https://kb.juniper.net/JSA11156
• https://kb.juniper.net/JSA11156

Get alerted when CVE-2021-0265 or the next vulnerability affects your stack