What is CVE-2017-2306?

CVE-2017-2306 is a high-severity vulnerability in Juniper Junos_space, classified under Incorrect Authorization. CVSS score: 8.8/10. Published 2017-05-30.

How severe is CVE-2017-2306?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in Juniper Junos_space

CVE-2017-2306

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device.

Vulnerability class: Broken Access Control

EPSS: 0.006 (69.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Juniper Junos_space
Juniper Networks Junos Space — versions versions prior to 16.1R1

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

sirt@juniper.net (x_refsource_CONFIRM, Mitigation, Vendor Advisory)
sirt@juniper.net (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2017-2306?: CVE-2017-2306 is a high-severity vulnerability in Juniper Junos_space, classified under Incorrect Authorization. CVSS score: 8.8/10. Published 2017-05-30.
How severe is CVE-2017-2306?: High severity. CVSS v3 base score is 8.8 out of 10.