CVE-2021-0220

The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser (for example via XSS) or access cached contents may be able to obtain a copy of credentials managed by Junos Space. The impact of a successful attack includes, but is not limited to, obtaining access to other servers connected to the Junos Space Management Platform. This issue affects Juniper Networks Junos Space versions prior to 20.3R1.

• CWE-257
• CWE-522

• https://kb.juniper.net/JSA11110Vendor Advisory
• https://kb.juniper.net/JSA11110Vendor Advisory

Published

Jan 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0214A vulnerability in the distributed or centralized periodic p…6.5
• CVE-2021-0215On Juniper Networks Junos EX series, QFX Series, MX Series a…6.5
• CVE-2021-0216A vulnerability in Juniper Networks Junos OS running on the …6.5
• CVE-2021-0217A vulnerability in processing of certain DHCP packets from a…7.4
• CVE-2021-0218A command injection vulnerability in the license-check daemo…7.8
• CVE-2021-0219A command injection vulnerability in install package validat…6.7
• CVE-2021-0221In an EVPN/VXLAN scenario, if an IRB interface with a virtua…6.5
• CVE-2021-0222A vulnerability in Juniper Networks Junos OS allows an attac…7.4
• CVE-2021-0223A local privilege escalation vulnerability in telnetd.real o…7.8
• CVE-2021-0224A vulnerability in the handling of internal resources necess…6.5
• CVE-2021-0225An Improper Check for Unusual or Exceptional Conditions in J…5.8
• CVE-2021-0226On Juniper Networks Junos OS Evolved devices, receipt of a s…7.5