CVE-2017-2308: XEE
Published May 30, 2017
·Updated
An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device.
Affected Software
1 affected component
Juniper Junos Space<=16.1
Event History
May 30, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-2308?
CVE-2017-2308 has a medium severity rating due to its potential to allow authenticated users to read arbitrary files.
2
How does CVE-2017-2308 affect Juniper Networks Junos Space?
CVE-2017-2308 affects Juniper Networks Junos Space versions prior to 16.1R1, allowing XML External Entity Injection.
3
How do I fix CVE-2017-2308?
To fix CVE-2017-2308, upgrade your Junos Space software to version 16.1R1 or later.
4
What are the consequences of CVE-2017-2308 exploitation?
Exploitation of CVE-2017-2308 could lead to unauthorized access to sensitive files on the device.
5
Who is affected by CVE-2017-2308?
Any organization using Juniper Networks Junos Space versions prior to 16.1R1 may be vulnerable to CVE-2017-2308.