{"api_version":"1","generated_at":"2026-07-23T09:56:10+00:00","cve":"CVE-2017-2309","urls":{"html":"https://cve.report/CVE-2017-2309","api":"https://cve.report/api/cve/CVE-2017-2309.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-2309","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-2309"},"summary":{"title":"CVE-2017-2309","description":"On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk.","state":"PUBLISHED","assigner":"juniper","published_at":"2017-05-30 14:29:01","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-200","information leak vulnerability"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"5.9","severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/98750","name":"http://www.securityfocus.com/bid/98750","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Juniper Junos Space CVE-2017-2309 Information Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://kb.juniper.net/JSA10770","name":"https://kb.juniper.net/JSA10770","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"],"title":"2017-01 Security Bulletin: Junos Space: Multiple vulnerabilities resolved in 16.1R1 release. - Juniper Networks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2309","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2309","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Juniper Networks","product":"Junos Space","version":"affected versions prior to 16.1R1","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"2309","vulnerable":"1","versionEndIncluding":"16.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"juniper","cpe5":"junos_space","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T13:48:05.397Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"98750","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/98750"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kb.juniper.net/JSA10770"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Junos Space","vendor":"Juniper Networks","versions":[{"status":"affected","version":"versions prior to 16.1R1"}]}],"datePublic":"2017-01-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk."}],"problemTypes":[{"descriptions":[{"description":"information leak vulnerability","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-05-31T09:57:01.000Z","orgId":"8cbe9d5a-a066-4c94-8978-4b15efeae968","shortName":"juniper"},"references":[{"name":"98750","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/98750"},{"tags":["x_refsource_CONFIRM"],"url":"https://kb.juniper.net/JSA10770"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"sirt@juniper.net","ID":"CVE-2017-2309","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Junos Space","version":{"version_data":[{"version_value":"versions prior to 16.1R1"}]}}]},"vendor_name":"Juniper Networks"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"information leak vulnerability"}]}]},"references":{"reference_data":[{"name":"98750","refsource":"BID","url":"http://www.securityfocus.com/bid/98750"},{"name":"https://kb.juniper.net/JSA10770","refsource":"CONFIRM","url":"https://kb.juniper.net/JSA10770"}]}}}},"cveMetadata":{"assignerOrgId":"8cbe9d5a-a066-4c94-8978-4b15efeae968","assignerShortName":"juniper","cveId":"CVE-2017-2309","datePublished":"2017-05-30T14:00:00.000Z","dateReserved":"2016-12-01T00:00:00.000Z","dateUpdated":"2024-08-05T13:48:05.397Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-05-30 14:29:01","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-200","information leak vulnerability"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*","versionEndIncluding":"16.1","matchCriteriaId":"A4B7AAA8-3D94-452C-A72E-E2A2F4840C95"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"2309","Ordinal":"1","Title":"CVE-2017-2309","CVE":"CVE-2017-2309","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"2309","Ordinal":"1","NoteData":"On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk.","Type":"Description","Title":"CVE-2017-2309"},{"CveYear":"2017","CveId":"2309","Ordinal":"2","NoteData":"2017-05-30","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"2309","Ordinal":"3","NoteData":"2017-05-31","Type":"Other","Title":"Modified"}]}}}