PT-2017-15348 · Juniper Networks · Northstar Controller Application

Published 2017-04-24 · Updated 2017-04-27 · CVE-2017-2318

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1

Description A vulnerability may allow an authenticated malicious user to read log files, compromising the system's integrity or providing elevation of privileges.

Recommendations For versions prior to 2.1.0 Service Pack 1, update to version 2.1.0 Service Pack 1 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-2318

Affected Products

Northstar Controller Application

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-2318 · Security Note
• https://osv.dev/vulnerability/CVE-2017-2318 · Vendor Advisory
• https://kb.juniper.net/JSA10783 · Vendor Advisory
• http://securityfocus.com/bid/97660 · Note