CVE-2017-2326 An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to r...
MediumCVSS 6.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future analysis.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper northstar controller | <= 2.1.0 | No fix listed |
| juniper NorthStar Controller Application | = prior to version 2.1.0 Service Pack 1 | No fix listed |
References
- 97691 third-party-advisory vdb-entry
- kb.juniper.net mitigation vendor-advisory