CVE-2017-10612

High

Published: 13/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML. This may be used to steal information or perform actions as other Junos Space users or administrators.

Risk Assessment

This vulnerability poses a risk of data theft and unauthorized access to the system, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update Juniper Networks Junos Space to version 17.1R1 or later to mitigate this vulnerability and restrict configuration access to trusted users.

Other vulnerabilities in Juniper Networks Junos Space

CVE-2017-10624High
Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.

Original NVD description (English source)

A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS