CVE-2017-10624
HighSummary
Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.
Risk Assessment
The organization may be exposed to unauthorized changes in the database and the addition of unauthorized nodes, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade Junos Space to version 17.1R1 or later to mitigate this vulnerability.
Other vulnerabilities in Juniper Networks Junos Space
See all- CVE-2017-10612High
A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML. This may be used to steal information or perform actions as other Junos Space users or administrators.
- CVE-2025-59978Critical
A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos Space allows an attacker to store script tags directly in web pages. When another user views such a page, the attacker can execute commands with the target's administrative permissions. This issue affects all versions of Junos Space before 24.1R4.
- CVE-2025-60009Medium
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlet page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
- CVE-2025-60002Medium
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Template Definitions page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
- CVE-2025-60000Medium
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
- CVE-2025-59998Medium
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Archive Log screen that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Original NVD description (English source)
Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS