CVE-2017-2326 Information disclosure in NorthStar Controller Application
An authenticated attacker can replicate the underlying Junos OS VM and its data for analysis, exposing sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-2326?
CVE-2017-2326 is a medium-severity vulnerability in Juniper Networks NorthStar Controller Application, published on 24 Apr 2017. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future analysis.
Weakness: CWE-200
Which versions are affected by CVE-2017-2326?
It affects 1 product.
Products include Juniper Northstar Controller.
How do I fix CVE-2017-2326?
No fix has been published for CVE-2017-2326 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-2326 being exploited?
There is no known exploitation of CVE-2017-2326 in the wild and no public exploit code.
Other vulnerabilities in Juniper Networks NorthStar Controller Application
- CVE-2017-2320 Information disclosure in NorthStar Controller Application
- CVE-2017-2332 Auth bypass in NorthStar Controller Application
- CVE-2017-2317 Denial of service in NorthStar Controller Application
- CVE-2017-2321 Other in NorthStar Controller Application
- CVE-2017-2319 Auth bypass in NorthStar Controller Application
Sources
Also known as GHSA-m2vr-5r7j-g5j9.