← All credits
Andy Coles of Microsoft MSRC Vulnerabilities and Mitigations Team
3 vulnerability records and advisories credit this contributor.
CVE-2021-31386
Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.
CVE-2021-31372
Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.
CVE-2021-31385
Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root