CVE-2017-10623

Junos Space: Insufficient verification of cluster messages

High · published October 13, 2017

CVSS v3.0
7.1
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00917 · 59.8th percentile
Published
2017-10-13T17:00Z
EPSS history
Timeline
  • 13 OCT 17:00Z
    Junos Space: Insufficient verification of cluster messages
    cvelistv5