CVE-2026-103404
CVE-2026-103404 · Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tmp directory.
CVSS 6.8 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
session smart conductor
- Versions
- ≥ 0, < 7.0.5: Affected (custom)
- ≥ 7.1.0, < 7.1.7: Affected (custom)
- ≥ 7.2.0, < 7.2.3: Affected (custom)
Update to 7.0.5; Update to 7.1.7; Update to 7.2.3