CVE-2017-2334
published 2017-04-24CVE-2017-2334: An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based…
high7.5CVSS 3.0
AVNACHPRNUIRSUCHIHAH
An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby stealing authentic credentials from encrypted paths which are easily decrypted, and subsequently gain complete control of the system.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | forticlient | — | — |
| fortinet | forticlientsslvpnclient | — | — |
| fortinet | fortinet | — | — |
| juniper | northstar_controller | <= 2.1.0 | — |
| juniper_networks | northstar_controller_application | — | — |