Information Leak Vulnerability in Juniper Networks NorthStar Controller Application

CVE-2017-2328

What is CVE-2017-2328?

An information leak vulnerability exists in the Juniper Networks NorthStar Controller Application that could allow an unprivileged, authenticated user to escalate their permissions by accessing sensitive information that should be restricted. This vulnerability affects versions of the application prior to 2.1.0 Service Pack 1, potentially exposing critical operational data to unauthorized users and increasing the risk of malicious actions within the system.

References