CVE-2017-2334

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby stealing authentic credentials from encrypted paths which are easily decrypted, and subsequently gain complete control of the system.

Score

CVSS 3.0 7.5 High

Status

Modified - sirt@juniper.net

Published

2017-04-24

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Northstar Controller (Juniper)
• Northstar Controller Application (Juniper Networks)

References

• http://www.securityfocus.com/bid/97616
• https://kb.juniper.net/JSA10783