CVE-2017-2328

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar controller...

Information disclosure

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading to targeted information disclosure, modification of any component of the...

CVE-2017-2330

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, local user, to create a fork bomb scenario, also known as a rabbit virus, or wabbit, which will create processes that replicate themselves,...

CVE-2017-2329

The Juniper Networks NorthStar Controller Application is affected prior to 2.1.0 Service Pack 1. An insufficient authentication flaw could allow an unprivileged, authenticated user to execute certain unprivileged system files, enabling widespread denial of service. Root cause: insufficient authen...

CVE-2017-2327

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to consume large amounts of system resources leading to a cascading denial of services...

CVE-2017-2331

CVE-2017-2331 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. The connected documents describe a firewall bypass vulnerability that could allow a network-based attacker to bypass firewall policies, leading to authentication bypass, information disc...

CVE-2017-2317

Juniper Networks NorthStar Controller Application before version 2.1.0 Service Pack 1 is vulnerable to a denial-of-service attack from an unauthenticated, network-based attacker. The issue can cause DoS of underlying database tables and may lead to information disclosure, modification of system s...

CVE-2017-2319

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without authentication, leading to managed systems being compromised or services being denied to authent...

CVE-2017-2334

The CVE-2017-2334 entry affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An attacker on the network may leverage an information-disclosure flaw to perform a man-in-the-middle attack, stealing credentials from encrypted paths and potentially gaining ...

CVE-2017-2333

Juniper Networks NorthStar Controller Application, before version 2.1.0 Service Pack 1, is vulnerable to a persistent denial of service. A network-based, authenticated attacker can exhaust resources by visiting certain URLs, leading to partial availability impact. The description and connected so...

CVE-2017-2328

The vulnerability CVE-2017-2328 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An information disclosure flaw allows an unprivileged, authenticated user to read unprivileged information stored in the NorthStar controller, enabling elevation of per...

CVE-2017-2320

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading to targeted information disclosure, modification of any component of the...

CVE-2017-2319

Affected product/component: Juniper Networks NorthStar Controller Application (NorthStar Controller). Vulnerability: Authentication bypass that can allow a remote attacker to compromise confidentiality and integrity without authentication, potentially affecting managed systems and making services...

CVE-2017-2332

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network based, unauthenticated attacker to perform privileged actions to gain complete control over the environment...

CVE-2017-2329

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to execute certain specific unprivileged system files capable of causing widespread denials of system services...

CVE-2017-2331

A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies, leading to authentication bypass methods, information disclosure, modification of system files, and...

CVE-2017-2318

The connected documents confirm CVE-2017-2318 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An authenticated malicious user may read log files, compromising integrity, and may gain elevation of privileges. This is tied to the NorthStar Controller...

CVE-2017-2325

Summary: CVE-2017-2325 refers to a buffer overflow in Juniper Networks NorthStar Controller Application before version 2.1.0 Service Pack 1, which could be triggered by an authenticated user to cause a denial of service. The connected CNVD/CNVD-2017-07222 and related records corroborate the affec...

CVE-2017-2320

The CVE affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An unauthenticated, unprivileged, network-based attacker can cause various denials of service and may modify any component of the NorthStar system, including managed systems, or cause full DoS...

CVE-2017-2316

The CVE-2017-2316 entry concerns Juniper Networks NorthStar Controller Application (pre-2.1.0 Service Pack 1). The vulnerability is a buffer overflow that can be triggered by an authenticated attacker, potentially causing a denial of service. Affected component: NorthStar Controller Application; ...