Juniper Junos Space CVE-2017-2307 Cross Site Scripting Vulnerability
BID:98749
Info
Juniper Junos Space CVE-2017-2307 Cross Site Scripting Vulnerability
| Bugtraq ID: | 98749 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-2307 |
| Remote: | Yes |
| Local: | No |
| Published: | May 30 2017 12:00AM |
| Updated: | May 30 2017 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Juniper JUNOS Space 1.2.2 Juniper JUNOS Space 15.2R2 Juniper JUNOS Space 15.2R1 Juniper JUNOS Space 15.2 Juniper JUNOS Space 15.1R3 Juniper JUNOS Space 15.1R2.11 Juniper JUNOS Space 15.1R2 Juniper JUNOS Space 15.1R1 Juniper JUNOS Space 15.1F3 Juniper JUNOS Space 15.1F2 Juniper JUNOS Space 14.1R1.9 Juniper JUNOS Space 14.1R1 Juniper JUNOS Space 14.1.R3.4 Juniper JUNOS Space 13.3R4.4 Juniper JUNOS Space 13.3R1.9 Juniper JUNOS Space 13.3R1.8 Juniper JUNOS Space 13.3 Juniper JUNOS Space 13.1R1.6 Juniper JUNOS Space 13.1R1 Juniper JUNOS Space 13.1P1.14 Juniper JUNOS Space 13.1 R1.8 Juniper JUNOS Space 13.1 Juniper JUNOS Space 12.3R2.8 Juniper JUNOS Space 12.3R1.3 Juniper JUNOS Space 12.3P2.8 Juniper JUNOS Space 12.3 Juniper JUNOS Space 12.2 Juniper JUNOS Space 12.1 Juniper JUNOS Space 11.4R5.5 Juniper JUNOS Space 11.4 Juniper JUNOS Space 11.3 Juniper JUNOS Space 11.2 Juniper JUNOS Space 11.1 Juniper JUNOS Space 1.4 Juniper JUNOS Space 1.3 Juniper JUNOS Space 1.0 |
| Not Vulnerable: |
Juniper JUNOS Space 16.1R1 |
Discussion
Juniper Junos Space CVE-2017-2307 Cross Site Scripting Vulnerability
Juniper Junos Space is prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Versions prior to Juniper Junos Space 16.1R1 are vulnerable.
Juniper Junos Space is prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Versions prior to Juniper Junos Space 16.1R1 are vulnerable.
Exploit / POC
Juniper Junos Space CVE-2017-2307 Cross Site Scripting Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
Solution / Fix
Juniper Junos Space CVE-2017-2307 Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Juniper Junos Space CVE-2017-2307 Cross Site Scripting Vulnerability
References:
References:
- Juniper HomePage (Juniper)
- Junos Space Homepage (Juniper Networks)
- 2017-01 Security Bulletin: Junos Space: Multiple vulnerabilities resolved in 16. (Juniper)