CVE-2019-0054

An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.

• CWE-295
• CWE-300
• CWE-295

• https://kb.juniper.net/JSA10952Vendor Advisory
• https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.htmlVendor Advisory
• https://kb.juniper.net/JSA10952Vendor Advisory
• https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.htmlVendor Advisory

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0048On EX4300 Series switches with TCAM optimization enabled, in…5.8
• CVE-2019-0049On Junos devices with the BGP graceful restart helper mode e…7.5
• CVE-2019-0050Under certain heavy traffic conditions srxpfe process can cr…7.5
• CVE-2019-0051SSL-Proxy feature on SRX devices fails to handle a hardware …7.5
• CVE-2019-0052The srxpfe process may crash on SRX Series services gateways…7.5
• CVE-2019-0053Insufficient validation of environment variables in the teln…7.8
• CVE-2019-0055A vulnerability in the SIP ALG packet processing service of …7.5
• CVE-2019-0056This issue only affects devices with three (3) or more MPC10…7.5
• CVE-2019-0057An improper authorization weakness in Juniper Networks Junos…7.8
• CVE-2019-0058A vulnerability in the Veriexec subsystem of Juniper Network…7.8
• CVE-2019-0059A memory leak vulnerability in the of Juniper Networks Junos…7.5
• CVE-2019-0060The flowd process, responsible for forwarding traffic in SRX…7.5