Insufficient Authentication Vulnerability in Juniper Networks NorthStar Controller Application
CVE-2017-2329

6.2MEDIUM

Key Information:

Vendor
Juniper Networks
Status
Northstar Controller Application
Vendor
CVE Published:
24 April 2017

Summary

An insufficient authentication vulnerability exists in Juniper Networks' NorthStar Controller Application that allows an authenticated user with no special privileges to execute specific unprivileged system files. This could result in widespread disruption of services offered by the application.

Affected Version(s)

NorthStar Controller Application prior to version 2.1.0 Service Pack 1

References

https://kb.juniper.net/JSA10783
x_refsource_CONFIRM
http://www.securityfocus.com/bid/97614
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.