CVE-2021-31380: Juniper Session And Resource Control

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to disclose sensitive information in the HTTP response which allows the attacker to obtain sensitive information.

Affected products

• Juniper Session And Resource Control: before 4.12.0r5 (fixed in 4.12.0r5); from 4.13.0r1, before 4.13.0r3 (fixed in 4.13.0r3)

Published 2021-10-19. Last modified 2026-06-17.