CVEvulnerability
CVE-2017-2308
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-05-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-611
Description
An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device.
Affected configurations
• juniper junos space (<= 16.1)
Related
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness
References
- http://www.securityfocus.com/bid/98755 Third Party Advisory, VDB Entry
- https://kb.juniper.net/JSA10770 Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/98755 Third Party Advisory, VDB Entry
- https://kb.juniper.net/JSA10770 Mitigation, Vendor Advisory