CVE-2017-10617

CVE-2017-10617 describes an XML External Entity (XXE) vulnerability in the ifmap service bundled with Juniper Networks Contrail versions 2.2 prior to 2.21.4, 3.0 prior to 3.0.3.4, 3.1 prior to 3.1.4.0, and 3.2 prior to 3.2.5.0. This medium-severity vulnerability, with a CVSSv3 score of 5.0, allows an unauthenticated attacker to retrieve sensitive system files with low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.