Juniper Support Portal Exposed Customer Device Info
Summary: Juniper Networks' customer support portal exposed device and support contract information for other customers' products, including model and serial numbers, approximate installation locations, warranty status and contract IDs, until the company fixed the issue earlier this week. Juniper attributed the exposure to a recent support portal upgrade, and a 17-year-old intern named Logan George found he could list records for virtually any Juniper device after logging in with a regular customer account.
Bottom line: The exposed contract data shows which Juniper devices are most likely missing critical security updates, and serial number tracking can narrow down where each device was sent - a map of attack surface for some of the world's largest organizations.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026