Information Leak Vulnerability in Juniper Networks NorthStar Controller Application

CVE-2017-2334

Summary

An information leak vulnerability exists in Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1. This flaw can permit a network-based malicious attacker to execute a man-in-the-middle attack, compromising encrypted communication paths. As a result, sensitive authentication credentials may be exposed, potentially granting the attacker unauthorized access and control over the system.

References