CVE-2017-2328

MEDIUM

Juniper Networks NorthStar Controller <2.1.0-SP1 - Info Disclosure

Title source: llm

Description

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar controller.

References (2)

Scores

CVSS v3 5.5
EPSS 0.0005
EPSS Percentile 15.9%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-200
Status published

Affected Products (2)

juniper/northstar_controller < 2.1.0
Juniper Networks/NorthStar Controller Application < prior to version 2.1.0 Service Pack 1

Timeline

Published Apr 24, 2017
Tracked Since Feb 18, 2026