CVE-2017-2328

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar controller.

Score

CVSS 3.0 5.5 Medium

Status

Modified - sirt@juniper.net

Published

2017-04-24

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Northstar Controller (Juniper)
• Northstar Controller Application (Juniper Networks)

References

• http://www.securityfocus.com/bid/97617
• https://kb.juniper.net/JSA10783