title: Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.
description: When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.
problem types: CWE-299 Improper Check for Certificate Revocation
affected:
{
product: MIST Cloud UI
vendor: Juniper Networks
versions:
lessThan: 09/02/2020, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 8.3
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
version: 3.1
]
solutions: Mist Cloud UI has been updated on September 2 2020 to resolve this specific issue.
workarounds: No workarounds are required since the issue has been resolved in the Mist cloud UI.