Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-2334

Опубликовано: 24 апр. 2017
Источник: nvd
CVSS3: 7.5
CVSS2: 4.3
EPSS Низкий

Описание

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby stealing authentic credentials from encrypted paths which are easily decrypted, and subsequently gain complete control of the system.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:juniper:northstar_controller:*:*:*:*:*:*:*:*
Версия до 2.1.0 (включая)

EPSS

Процентиль: 50%
0.00274
Низкий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby stealing authentic credentials from encrypted paths which are easily decrypted, and subsequently gain complete control of the system.

EPSS

Процентиль: 50%
0.00274
Низкий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200