CVEvulnerability
CVE-2017-2305
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-05-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-863
Description
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation.
Affected configurations
• juniper junos space (<= 16.1)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- http://www.securityfocus.com/bid/98759 Third Party Advisory, VDB Entry
- https://kb.juniper.net/JSA10770 Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/98759 Third Party Advisory, VDB Entry
- https://kb.juniper.net/JSA10770 Mitigation, Vendor Advisory