CVE-2017-2331 Security feature bypass in NorthStar Controller Application
A firewall bypass in Juniper NorthStar Controller allows attackers to bypass policies, leading to authentication bypass, data exposure, file modification, and denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-2331?
CVE-2017-2331 is a high-severity vulnerability in Juniper Networks NorthStar Controller Application, published on 24 Apr 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies, leading to authentication bypass methods, information disclosure, modification of system files, and denials of service.
Which versions are affected by CVE-2017-2331?
It affects 1 product.
Products include Juniper Northstar Controller.
How do I fix CVE-2017-2331?
No fix has been published for CVE-2017-2331 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-2331 being exploited?
There is no known exploitation of CVE-2017-2331 in the wild and no public exploit code.
Other vulnerabilities in Juniper Networks NorthStar Controller Application
- CVE-2017-2320 Information disclosure in NorthStar Controller Application
- CVE-2017-2332 Auth bypass in NorthStar Controller Application
- CVE-2017-2317 Denial of service in NorthStar Controller Application
- CVE-2017-2321 Other in NorthStar Controller Application
- CVE-2017-2319 Auth bypass in NorthStar Controller Application
Sources
Also known as GHSA-64vm-9chm-hwfr.