CVE-2017-2328

2017-04-2415:00:00

juniper

www.cve.org

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar controller.

CNA Affected

[
  {
    "product": "NorthStar Controller Application",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "status": "affected",
        "version": "prior to version 2.1.0 Service Pack 1"
      }
    ]
  }
]

References

www.securityfocus.com/bid/97617

kb.juniper.net/JSA10783