CVE-2017-2334 An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle...
HighCVSS 7.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby stealing authentic credentials from encrypted paths which are easily decrypted, and subsequently gain complete control of the system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper northstar controller | <= 2.1.0 | No fix listed |
| juniper NorthStar Controller Application | = prior to version 2.1.0 Service Pack 1 | No fix listed |
References
- 97616 third-party-advisory vdb-entry
- kb.juniper.net mitigation vendor-advisory