CVE-2017-2306

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device.

Score

CVSS 3.0 8.8 High

Status

Modified - sirt@juniper.net

Published

2017-05-30

Last modified

2024-08-05

Weaknesses

CWE-863

Affected products

• Junos Space (Juniper)
• Junos Space (Juniper Networks)

References

• http://www.securityfocus.com/bid/98772
• https://kb.juniper.net/JSA10770