On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/98772 | Third Party Advisory VDB Entry |
https://kb.juniper.net/JSA10770 | Mitigation Vendor Advisory |
http://www.securityfocus.com/bid/98772 | Third Party Advisory VDB Entry |
https://kb.juniper.net/JSA10770 | Mitigation Vendor Advisory |
Configurations
History
21 Nov 2024, 03:23
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securityfocus.com/bid/98772 - Third Party Advisory, VDB Entry | |
References | () https://kb.juniper.net/JSA10770 - Mitigation, Vendor Advisory |
Information
Published : 2017-05-30 14:29
Updated : 2024-11-21 03:23
NVD link : CVE-2017-2306
Mitre link : CVE-2017-2306
CVE.ORG link : CVE-2017-2306
JSON object : View
Products Affected
juniper
- junos_space
CWE
CWE-863
Incorrect Authorization