Missing authorization in Junos Space Security Director - CVE-2025-59968

Detailed vulnerability description

The vulnerability allows a remote attacker to gain access to otherwise restricted functionality.

The vulnerability exists due to missing authorization checks in web interface. A remote non-authenticated attacker can tamper with metadata and permit network traffic that should otherwise be blocked by policy leading to a bypass of intended security controls.

How to mitigate CVE-2025-59968

Sources

• https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Juniper-Security-Director-Insufficient-authorization-for-sensitive-resources-in-web-interface-CVE-2025-59968