CVE-2017-2309 Vulnerability Details

  /     /     /  

CVE-2017-2309 Metadata Quick Info

CVE Published: 30/05/2017 | CVE Updated: 05/08/2024 | CVE Year: 2017
Source: juniper | Vendor: Juniper Networks | Product: Junos Space
Status : PUBLISHED

---

CVE-2017-2309 Description

On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: information leak vulnerability
Source: Juniper Networks

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).