CVE-2017-2306

CVE-2017-2306 affects Juniper Networks Junos Space: versions prior to 16.1R1 suffer from an insufficient authorization check in the administrative web interface, allowing readonly users to execute code on the device. This is described in the NVD entry for CVE-2017-2306, which notes remote code ex...

CVE-2017-2308

The CVE-2017-2308 entry affects Juniper Networks Junos Space, with an XML External Entity (XXE) vulnerability in the web management interface. Affected: Junos Space versions prior to 16.1R1. The underlying issue allows an authenticated user to read arbitrary files on the device. Impact: Partial c...

CVE-2017-2311

CVE-2017-2311 affects Juniper Networks Junos Space before version 16.1R1. An unauthenticated remote attacker with network access can trigger a denial-of-service condition on the Junos Space device. The vulnerability is tied to the Junos Space software lineage as described in multiple sources; mit...

CVE-2017-2307

CVE-2017-2307 affects Juniper Networks Junos Space (admin interface) prior to 16.1R1 and is a reflected cross-site scripting vulnerability. The issue can allow remote attackers to steal sensitive information or perform certain administrative actions, with exploitation requiring user interaction. ...

CVE-2017-2305

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation...

CVE-2017-2306

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device...

CVE-2017-2305

CVE-2017-2305 concerns Juniper Networks Junos Space prior to 16.1R1, where an insufficient authorization check in the administrative web interface lets readonly users create privileged accounts, enabling privilege escalation. The vulnerability path and impact are described in the NVD entry as a u...

CVE-2017-2310

A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets, representing a network integrity risk...

CVE-2017-2309

Affected product: Juniper Networks Junos Space (versions prior to 16.1R1). Vulnerability: Information disclosure due to certificate-based authentication enabling access to restricted web services over the network. Impact: Confidentiality impact is high; information leak risk reported. Status/reme...

CVE-2017-2307

A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space...

CVE-2017-2309

On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk...

CVE-2017-2305: Incorrect Authorization

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation...

CVE-2017-2306: Incorrect Authorization

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device...

PT-2017-15343

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description A firewall bypass issue in the host-based firewall may allow certain crafted packets to bypass security, posing a risk to network integrity. Recommendations For versions prior to 16.1R1, update ...

PT-2017-15342

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue represents an information leak risk due to some restricted web services being accessible over the network when certificate-based authentication is enabled for the Junos Space cluster...

CVE-2017-2308: Improper Restriction of XML External Entity Reference

An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device...

CVE-2017-2310: Undefined Security Weakness

A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets, representing a network integrity risk...

CVE-2017-2307: Improper Neutralization of Input During Web Page Generation

A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space...

PT-2017-15344

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue allows an unauthenticated remote attacker with network access to create a denial of service condition. Recommendations For versions prior to 16.1R1, update to version 16.1R1 or later t...

PT-2017-15338

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue is related to an insufficient authorization check. On the Junos Space administrative web interface, readonly users can create privileged users, allowing privilege escalation...