Vulnerability-Lookup

CNVD-2023-49465

Vulnerability from cnvd - Published: 2023-06-14

Title

Juniper Networks Paragon Active Assurance跨站脚本漏洞

Description

Juniper Networks Paragon Active Assurance是美国瞻博网络（Juniper Networks）公司的一种可编程的测试和服务保证解决方案。使用基于软件和流量生成的测试代理，可作为SaaS解决方案从云中轻松使用和交付，或在NFV环境中本地部署。 Juniper Networks Paragon Active Assurance（Netrounds）3.1.1之前版本、3.2版本存在安全漏洞，该漏洞源于控制中心控制器网页中允许高权限攻击者具有写入权限来存储一个或多个恶意脚本，当他们在管理设备时意外触发恶意脚本时，这些脚本将感染任何其他授权用户的帐户，攻击者可利用该漏洞执行具有超级用户帐户权限的命令。

Severity

高

Patch Name

Juniper Networks Paragon Active Assurance跨站脚本漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://kb.juniper.net/JSA69883

Reference

https://nvd.nist.gov/vuln/detail/CVE-2022-22229

Impacted products

Name
['Juniper Networks Paragon Active Assurance <3.1.1', 'Juniper Networks Paragon Active Assurance 3.2.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-22229",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2022-22229"
    }
  },
  "description": "Juniper Networks Paragon Active Assurance\u662f\u7f8e\u56fd\u77bb\u535a\u7f51\u7edc\uff08Juniper Networks\uff09\u516c\u53f8\u7684\u4e00\u79cd\u53ef\u7f16\u7a0b\u7684\u6d4b\u8bd5\u548c\u670d\u52a1\u4fdd\u8bc1\u89e3\u51b3\u65b9\u6848\u3002\u4f7f\u7528\u57fa\u4e8e\u8f6f\u4ef6\u548c\u6d41\u91cf\u751f\u6210\u7684\u6d4b\u8bd5\u4ee3\u7406\uff0c\u53ef\u4f5c\u4e3aSaaS\u89e3\u51b3\u65b9\u6848\u4ece\u4e91\u4e2d\u8f7b\u677e\u4f7f\u7528\u548c\u4ea4\u4ed8\uff0c\u6216\u5728NFV\u73af\u5883\u4e2d\u672c\u5730\u90e8\u7f72\u3002\n\nJuniper Networks Paragon Active Assurance\uff08Netrounds\uff093.1.1\u4e4b\u524d\u7248\u672c\u30013.2\u7248\u672c\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u63a7\u5236\u4e2d\u5fc3\u63a7\u5236\u5668\u7f51\u9875\u4e2d\u5141\u8bb8\u9ad8\u6743\u9650\u653b\u51fb\u8005\u5177\u6709\u5199\u5165\u6743\u9650\u6765\u5b58\u50a8\u4e00\u4e2a\u6216\u591a\u4e2a\u6076\u610f\u811a\u672c\uff0c\u5f53\u4ed6\u4eec\u5728\u7ba1\u7406\u8bbe\u5907\u65f6\u610f\u5916\u89e6\u53d1\u6076\u610f\u811a\u672c\u65f6\uff0c\u8fd9\u4e9b\u811a\u672c\u5c06\u611f\u67d3\u4efb\u4f55\u5176\u4ed6\u6388\u6743\u7528\u6237\u7684\u5e10\u6237\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u5177\u6709\u8d85\u7ea7\u7528\u6237\u5e10\u6237\u6743\u9650\u7684\u547d\u4ee4\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://kb.juniper.net/JSA69883",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2023-49465",
  "openTime": "2023-06-14",
  "patchDescription": "Juniper Networks Paragon Active Assurance\u662f\u7f8e\u56fd\u77bb\u535a\u7f51\u7edc\uff08Juniper Networks\uff09\u516c\u53f8\u7684\u4e00\u79cd\u53ef\u7f16\u7a0b\u7684\u6d4b\u8bd5\u548c\u670d\u52a1\u4fdd\u8bc1\u89e3\u51b3\u65b9\u6848\u3002\u4f7f\u7528\u57fa\u4e8e\u8f6f\u4ef6\u548c\u6d41\u91cf\u751f\u6210\u7684\u6d4b\u8bd5\u4ee3\u7406\uff0c\u53ef\u4f5c\u4e3aSaaS\u89e3\u51b3\u65b9\u6848\u4ece\u4e91\u4e2d\u8f7b\u677e\u4f7f\u7528\u548c\u4ea4\u4ed8\uff0c\u6216\u5728NFV\u73af\u5883\u4e2d\u672c\u5730\u90e8\u7f72\u3002\r\n\r\nJuniper Networks Paragon Active Assurance\uff08Netrounds\uff093.1.1\u4e4b\u524d\u7248\u672c\u30013.2\u7248\u672c\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u63a7\u5236\u4e2d\u5fc3\u63a7\u5236\u5668\u7f51\u9875\u4e2d\u5141\u8bb8\u9ad8\u6743\u9650\u653b\u51fb\u8005\u5177\u6709\u5199\u5165\u6743\u9650\u6765\u5b58\u50a8\u4e00\u4e2a\u6216\u591a\u4e2a\u6076\u610f\u811a\u672c\uff0c\u5f53\u4ed6\u4eec\u5728\u7ba1\u7406\u8bbe\u5907\u65f6\u610f\u5916\u89e6\u53d1\u6076\u610f\u811a\u672c\u65f6\uff0c\u8fd9\u4e9b\u811a\u672c\u5c06\u611f\u67d3\u4efb\u4f55\u5176\u4ed6\u6388\u6743\u7528\u6237\u7684\u5e10\u6237\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u53ef\u4ee5\u6267\u884c\u5177\u6709\u8d85\u7ea7\u7528\u6237\u5e10\u6237\u6743\u9650\u7684\u547d\u4ee4\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Juniper Networks Paragon Active Assurance\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Juniper Networks Paragon Active Assurance \u003c3.1.1",
      "Juniper Networks Paragon Active Assurance 3.2.0"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2022-22229",
  "serverity": "\u9ad8",
  "submitTime": "2022-10-20",
  "title": "Juniper Networks Paragon Active Assurance\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e"
}

CVE-2022-22229 (GCVE-0-2022-22229)

Vulnerability from cvelistv5 – Published: 2022-10-18 02:46 – Updated: 2025-05-12 14:28

Title

Paragon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administration

Summary

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability, a stored XSS (or persistent), in the Control Center Controller web pages of Juniper Networks Paragon Active Assurance (Formerly Netrounds) allows a high-privilege attacker with 'WRITE' permissions to store one or more malicious scripts that will infect any other authorized user's account when they accidentally trigger the malicious script(s) while managing the device. Triggering these attacks enables the attacker to execute commands with the permissions up to that of the superuser account. This issue affects: Juniper Networks Paragon Active Assurance (Formerly Netrounds) All versions prior to 3.1.1; 3.2 versions prior to 3.2.1.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-05-12 14:28 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

juniper mitre root

References

1 reference

URL	Tags
https://kb.juniper.net/JSA69883

Impacted products

1 product

Vendor	Product	Version
Juniper Networks	Paragon Active Assurance (Formerly Netrounds)	Affected: unspecified , < 3.1.1 (custom) Affected: 3.2 , < 3.2.1 (custom)

Date Public

2022-10-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:07:49.771Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA69883"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-22229",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-12T14:28:36.913015Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-12T14:28:43.468Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Paragon Active Assurance (Formerly Netrounds)",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "3.1.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "3.2.1",
              "status": "affected",
              "version": "3.2",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2022-10-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027) vulnerability, a stored XSS (or persistent), in the Control Center Controller web pages of Juniper Networks Paragon Active Assurance (Formerly Netrounds) allows a high-privilege attacker with \u0027WRITE\u0027 permissions to store one or more malicious scripts that will infect any other authorized user\u0027s account when they accidentally trigger the malicious script(s) while managing the device. Triggering these attacks enables the attacker to execute commands with the permissions up to that of the superuser account. This issue affects: Juniper Networks Paragon Active Assurance (Formerly Netrounds) All versions prior to 3.1.1; 3.2 versions prior to 3.2.1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-18T00:00:00.000Z",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "url": "https://kb.juniper.net/JSA69883"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "The following software releases have been updated to resolve this specific issue: 3.1.1, 3.2.1, 3.3.0, and all subsequent releases.\n\nAdditionally, if there are malicious templates in the system, once upgraded to a fixed release, these templates can be safely removed from the system."
        }
      ],
      "source": {
        "advisory": "JSA69883",
        "defect": [
          "CCC-299"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Paragon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administration",
      "workarounds": [
        {
          "lang": "en",
          "value": "There are no known workarounds for this issue.\n\nTo reduce the risk of exploitation of this issue, use access lists or firewall filters to limit access to only trusted administrative networks, hosts and users."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2022-22229",
    "datePublished": "2022-10-18T02:46:31.075Z",
    "dateReserved": "2021-12-21T00:00:00.000Z",
    "dateUpdated": "2025-05-12T14:28:43.468Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.