CVE-2017-2328 An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions...
MediumCVSS 5.5
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar controller.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper northstar controller | <= 2.1.0 | No fix listed |
| juniper NorthStar Controller Application | = prior to version 2.1.0 Service Pack 1 | No fix listed |
References
- 97617 third-party-advisory vdb-entry
- kb.juniper.net mitigation vendor-advisory