CVE-2024-39544

Junos OS Evolved: Low privileged local user able to view NETCONF traceoptions files

Description

An Incorrect Default Permissions vulnerability in the command line interface (CLI) of Juniper Networks Junos OS Evolved allows a low privileged local attacker to view NETCONF traceoptions files, representing an exposure of sensitive information. On all Junos OS Evolved platforms, when NETCONF traceoptions are configured, NETCONF traceoptions files get created with an incorrect group permission, which allows a low-privileged user can access sensitive information compromising the confidentiality of the system. Junos OS Evolved:  * All versions before 20.4R3-S9-EVO,  * 21.2-EVO before 21.2R3-S7-EVO,  * 21.4-EVO before 21.4R3-S5-EVO,  * 22.1-EVO before 22.1R3-S5-EVO,  * 22.2-EVO before 22.2R3-S3-EVO,  * 22.3-EVO before 22.3R3-EVO, 22.3R3-S2-EVO,  * 22.4-EVO before 22.4R3-EVO,  * 23.2-EVO before 23.2R1-S2-EVO, 23.2R2-EVO.

Remediation

Solution:

  • The following software releases have been updated to resolve this specific issue: Junos OS Evolved 20.4R3-S9-EVO, 21.2R3-S7-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S5-EVO, 22.2R3-S3-EVO, 22.3R3-S2-EVO, 22.4R3-EVO, 23.2R1-S2-EVO, 23.2R2-EVO, 23.4R1-EVO, and all subsequent releases. Restoration: To completely remediate this issue, any previously written traceoptions log files should be deleted or have their file permissions changed. See Workaround section above for details.

Workaround:

  • Disable NETCONF traceoptions and delete any existing traceoptions files in /var/log. Manually modify the permissions of the NETCONF log file to restore the correct group ownership: user@junos> file change-owner group root /var/log/netconflog.log

Category

5.1
CVSS
Severity: Medium
CVSS 4.0 •
CVSS 3.1 •
EPSS 0.01%
Vendor Advisory juniper.net
Affected: Juniper Networks Junos OS Evolved
Published at:
Updated at:

References

Link Tags
https://supportportal.juniper.net/JSA88106 vendor advisory

Frequently Asked Questions

What is the severity of CVE-2024-39544?
CVE-2024-39544 has been scored as a medium severity vulnerability.
How to fix CVE-2024-39544?
To fix CVE-2024-39544: The following software releases have been updated to resolve this specific issue: Junos OS Evolved 20.4R3-S9-EVO, 21.2R3-S7-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S5-EVO, 22.2R3-S3-EVO, 22.3R3-S2-EVO, 22.4R3-EVO, 23.2R1-S2-EVO, 23.2R2-EVO, 23.4R1-EVO, and all subsequent releases. Restoration: To completely remediate this issue, any previously written traceoptions log files should be deleted or have their file permissions changed. See Workaround section above for details.
Is CVE-2024-39544 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-39544 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-39544?
CVE-2024-39544 affects Juniper Networks Junos OS Evolved.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.