Severity
High
Analysis Summary
CVE-2023-28971
Juniper Networks Paragon Active Assurance could allow a remote attacker to bypass security restrictions, caused by an improper restriction of communication channel to intended endpoints vulnerability in the timescaledb feature. By sending a specially crafted request, an attacker could exploit this vulnerability to bypass existing firewall rules and limitations used to restrict internal communcations.
Impact
- Bypass Security
Indicators Of Compromise
CVE
- CVE-2023-28971
Affected Vendors
Juniper
Affected Products
- Juniper Networks Paragon Active Assurance
Remediation
Refer to Juniper Networks Security Bulletin for patch, upgrade or suggested workaround information.