CVE-2017-10623

Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.

Score

CVSS 3.0 8.1 High

Status

Modified - sirt@juniper.net

Published

2017-10-13

Last modified

2024-09-17

Weaknesses

CWE-287

Affected products

• Junos Space (Juniper)
• Junos Space (Juniper Networks)

References

• https://kb.juniper.net/JSA10826