CVE-2017-2305
HighSummary
In Junos Space versions prior to 16.1R1, there is a vulnerability due to insufficient authorization checks that allows readonly users on the administrative web interface to create privileged users, enabling privilege escalation.
Risk Assessment
Organizations may be exposed to unauthorized access to resources, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to Junos Space version 16.1R1 or later to mitigate this vulnerability.
Other vulnerabilities in Junos Space
See all- CVE-2017-2306High
In Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the administrative web interface can execute code on the device.
- CVE-2016-4929High
CVE-2016-4929 in Junos Space before version 15.2R2 contains a vulnerability that allows attackers to execute arbitrary code as a root user.
- CVE-2016-4928High
CVE-2016-4928 is a cross-site request forgery vulnerability in Junos Space before version 15.2R2 that allows remote attackers to perform certain administrative actions.
- CVE-2016-4927High
Insufficient validation of SSH keys in Junos Space before version 15.2R2 allows man-in-the-middle (MITM) type attacks while a Space device is communicating with managed devices.
- CVE-2016-1265Critical
CVE-2016-1265 allows a remote unauthenticated attacker with access to Junos Space to execute arbitrary code or gain access to devices managed by Junos Space. It exploits attack vectors such as CSRF, default authentication credentials, information leak, and command injection.
- CVE-2016-4926Critical
CVE-2016-4926 describes an insufficient authentication vulnerability in Junos Space before version 15.2R2, allowing remote users with access to the Junos Space web interface to perform certain administrative tasks without authentication.
- CVE-2026-21904Medium
A Cross-site Scripting (XSS) vulnerability was found in Juniper Networks Junos Space in the list filter field. It allows an attacker to inject malicious script tags that, when visited by another user (including an administrator), execute commands with the target's permissions. All versions before 24.1R5 Patch V3 are affected.
Original NVD description (English source)
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation.