CVE-2018-0025

CVE-2018-0025 describes a vulnerability in Juniper Networks SRX Series devices where HTTP/HTTPS pass-through authentication credentials can be captured by malicious actors during subsequent requests via man-in-the-middle attacks or compromised servers. This high-severity vulnerability (CVSS 8.1) has a high potential for confidentiality, integrity, and availability impact due to its network attack vector and low attack complexity. While no active exploitation, public exploit code, or significant community discussion has been observed, affected organizations should patch devices running vulnerable Junos OS versions prior to 12.1X46-D67, 12.3X48-D25, or 15.1X49-D35.