Medium severity5.0NVD Advisory· Published Oct 13, 2017· Updated May 13, 2026
CVE-2017-10617
CVE-2017-10617
Description
The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and have a combined CVSSv3 score of 5.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).
Affected products
2- Juniper Networks/Contrailv5Range: 2.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/orangecertcc/security-research/security/advisories/GHSA-wjp8-8qf6-vqmcnvdThird Party Advisory
- kb.juniper.net/JSA10819nvdVendor Advisory
News mentions
0No linked articles in our index yet.