CVE-2017-2309

Severity: medium (CVSS 5.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-05-30 · updated 2026-06-17
Weakness: CWE-200

Description

On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk.

Affected products

Juniper Networks Junos Space: through 16.1

References

http://www.securityfocus.com/bid/98750
https://kb.juniper.net/JSA10770
http://www.securityfocus.com/bid/98750
https://kb.juniper.net/JSA10770

Get alerted when CVE-2017-2309 or the next vulnerability affects your stack