CVE-2017-10624 HIGH

CVE-2017-10624: Junos Space: Insufficient verification of node certificates.

Vendor Juniper Networks
Product Junos Space
Published October 13, 2017
Last update September 16, 2024

CVSS base score

7.5/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.

Key dates

02Disclosure timeline

October 13, 2017 CVE published
September 16, 2024 Record updated