CVE-2017-2319

HIGH

Juniper Networks NorthStar Controller App <2.1.0-SP1 - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without authentication, leading to managed systems being compromised or services being denied to authentic end users and systems as a result.

References (2)

Core 2
Core References
Mitigation, Vendor Advisory x_refsource_confirm
https://kb.juniper.net/JSA10783
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/97659

Scores

CVSS v3 8.3
EPSS 0.0057
EPSS Percentile 68.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Details

CWE
CWE-287
Status published
Products (2)
juniper/northstar_controller < 2.1.0
Juniper Networks/NorthStar Controller Application prior to version 2.1.0 Service Pack 1
Published Apr 24, 2017
Tracked Since Feb 18, 2026