CVE-2017-2334: juniper networks northstar controller application

Vulnerability summary

CVE-2017-2334 is a high (CVSS 7.5) vulnerability in juniper networks northstar controller application. EPSS estimates a 0.97% chance of exploitation in the next 30 days, higher than 61.3% of scored vulnerabilities.

Timeline

1. 24-04-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby stealing authentic credentials from encrypted paths which are easily decrypted, and subsequently gain complete control of the system.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.