CVE-2026-103404
MediumCVSS 6.8Summary
An incorrect permission assignment for a critical resource in RoutingManager of Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials by triggering processes that write to the /tmp directory.
Risk Assessment
A local user can gain access to sensitive credentials, potentially leading to privilege escalation or unauthorized access to network infrastructure.
Recommendation
Update Juniper Networks Session Smart Conductor software to the version containing the fix. Restrict local user permissions and monitor access to the /tmp directory.
Other vulnerabilities in Juniper Networks Session Smart Conductor
Original NVD description (English source)
An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tmp directory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS