Juniper Junos Space CVE-2017-10622 Authentication Bypass Vulnerability

by CIRT Team

Description: An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases prior to 16.1R3

Impact: An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may lead to further attacks.

Mitigation: Updates are available. Please see the references or vendor advisory for more information.

Reference URL’s:

• https://www.cvedetails.com/cve/CVE-2017-10622/
• http://www.securityfocus.com/bid/101258/info
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10824&actp=METADATA

CIRT Team