CVE-2017-2318

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will compromise the integrity of the system, or provide elevation of privileges.

• CWE-200

• http://www.securityfocus.com/bid/97660Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10783Mitigation, Vendor Advisory
• http://www.securityfocus.com/bid/97660Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10783Mitigation, Vendor Advisory

Published

Apr 24, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2312On Juniper Networks devices running Junos OS affected versio…
• CVE-2017-2313Juniper Networks devices running affected Junos OS versions …
• CVE-2017-2314Receipt of a malformed BGP OPEN message may cause the routin…7.5
• CVE-2017-2315On Juniper Networks EX Series Ethernet Switches running affe…
• CVE-2017-2316A buffer overflow vulnerability in Juniper Networks NorthSta…
• CVE-2017-2317A denial of service vulnerability in Juniper Networks NorthS…
• CVE-2017-2319A vulnerability in Juniper Networks NorthStar Controller App…
• CVE-2017-2320A vulnerability in Juniper Networks NorthStar Controller App…
• CVE-2017-2321A vulnerability in Juniper Networks NorthStar Controller App…
• CVE-2017-2322A denial of service vulnerability in Juniper Networks NorthS…
• CVE-2017-2323A denial of service vulnerability in Juniper Networks NorthS…
• CVE-2017-2324A command injection vulnerability in Juniper Networks NorthS…