CVE-2017-2306 Vulnerability Details

  /     /     /  

CVE-2017-2306 Metadata Quick Info

CVE Published: 30/05/2017 | CVE Updated: 05/08/2024 | CVE Year: 2017
Source: juniper | Vendor: Juniper Networks | Product: Junos Space
Status : PUBLISHED

---

CVE-2017-2306 Description

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: insufficient authorization check leading to code execution
Source: Juniper Networks

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).