CVE-2017-10624

High

Published: 13/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.

Risk Assessment

The organization may be exposed to unauthorized changes in the database and the addition of unauthorized nodes, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade Junos Space to version 17.1R1 or later to mitigate this vulnerability.

Other vulnerabilities in Juniper Networks Junos Space

CVE-2017-10612High
A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML. This may be used to steal information or perform actions as other Junos Space users or administrators.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS