CVEvulnerability
CVE-2017-2306
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-05-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-863
Description
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device.
Affected configurations
• juniper junos space (<= 16.1)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- http://www.securityfocus.com/bid/98772 Third Party Advisory, VDB Entry
- https://kb.juniper.net/JSA10770 Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/98772 Third Party Advisory, VDB Entry
- https://kb.juniper.net/JSA10770 Mitigation, Vendor Advisory