Juniper Networks JUNOS Space CVE-2017-10612 HTML Injection Vulnerability

Bugtraq ID:	101256
Class:	Input Validation Error
CVE:	CVE-2017-10612
Remote:	Yes
Local:	No
Published:	Oct 11 2017 12:00AM
Updated:	Oct 11 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Juniper JUNOS Space 16.1R1 Juniper JUNOS Space 15.2R2 Juniper JUNOS Space 15.2R1 Juniper JUNOS Space 15.2 Juniper JUNOS Space 15.1R3 Juniper JUNOS Space 15.1R2.11 Juniper JUNOS Space 15.1R2 Juniper JUNOS Space 15.1R1 Juniper JUNOS Space 15.1F3 Juniper JUNOS Space 15.1F2 Juniper JUNOS Space 14.1R1.9 Juniper JUNOS Space 14.1R1 Juniper JUNOS Space 14.1.R3.4 Juniper JUNOS Space 13.3R4.4 Juniper JUNOS Space 13.3R1.9 Juniper JUNOS Space 13.3R1.8 Juniper JUNOS Space 13.3 Juniper JUNOS Space 13.1R1.6 Juniper JUNOS Space 13.1R1 Juniper JUNOS Space 13.1P1.14 Juniper JUNOS Space 13.1 R1.8 Juniper JUNOS Space 13.1 - Juniper JUNOS Space 13.1 Juniper JUNOS Space 12.3R2.8 Juniper JUNOS Space 12.3R1.3 Juniper JUNOS Space 12.3P2.8 Juniper JUNOS Space 12.3 Juniper JUNOS Space 12.2 Juniper JUNOS Space 12.1 Juniper JUNOS Space 11.4R5.5 Juniper JUNOS Space 11.4 Juniper JUNOS Space 11.3 Juniper JUNOS Space 11.2
Not Vulnerable:	Juniper JUNOS Space 17.1R1

Juniper Networks JUNOS Space CVE-2017-10612 HTML Injection Vulnerability

Juniper Networks JUNOS Space is prone to an HTML-injection vulnerability because it fails to sanitize user-supplied input.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected site, potentially allowing the attacker to escalate privileges or to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.

Juniper Networks Junos Space prior to 17.1R1 are vulnerable.

Juniper Networks JUNOS Space CVE-2017-10612 HTML Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].