PT-2017-15360 · Juniper Networks · Northstar Controller Application

Published 2017-04-24 · Updated 2019-10-03 · CVE-2017-2331

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1

Description A firewall bypass issue may allow a network-based malicious attacker to bypass firewall policies, potentially leading to authentication bypass methods, information disclosure, modification of system files, and denials of service.

Recommendations For versions prior to 2.1.0 Service Pack 1, update to version 2.1.0 Service Pack 1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-2331

Affected Products

Northstar Controller Application

References · 4

• https://kb.juniper.net/JSA10783 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2331 · Security Note
• https://osv.dev/vulnerability/CVE-2017-2331 · Vendor Advisory
• http://securityfocus.com/bid/97619 · Note