VYPR
Medium severity5.5NVD Advisory· Published Apr 24, 2017· Updated Jun 17, 2026

CVE-2017-2328

CVE-2017-2328

Description

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar controller.

Affected products

3
  • cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*range: <=2.1.0
    • (no CPE)range: <2.1.0 Service Pack 1
    • (no CPE)range: prior to version 2.1.0 Service Pack 1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.