Vulnerabilities for Pulse connect secure (...) - CXSECURITY.COM

Vulnerabilities for 'Pulse connect secure'

2015-10-05

CVE-2015-7323

The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote authenticated users to bypass intended access restrictions and log into arbitrary meetings by leveraging a meeting id and meetingAppSun.jar.

CVE-2015-7322

The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the meeting, which allows remote attackers to enumerate valid meeting ids via a series of requests.

2015-08-11

CVE-2015-5369

Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished TLS handshake message, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted Finished message.

>>> Vendor: Juniper 101 Products

Netscreen screenos

Netscreen remote security client

Netscreen remote vpn client

Netscreen-idp 10

Netscreen-idp 100

Netscreen-idp 1000

Netscreen-idp 500

Netscreen-security manager 2004

Junipersetup control

Session and resource control

Secure access 2000

Odyssey access client

Networks mobility system software

Junos space virtual appliance

Junos space ja1500 appliance

Junos pulse access control service

Junos pulse secure access service

Secure access virtual appliance

Fips secure access 4000

Fips secure access 4500

Fips secure access 6000

Fips secure access 6500

Mag2600 gateway

Mag4610 gateway

Mag6610 gateway

Mag6611 gateway

Secure access 2500

Secure access 4000

Secure access 4500

Secure access 6000

Secure access 6500

Secure access 700

Network and security manager software

Junos space ja2500 appliance

Fips infranet controller 6500

Infranet controller 4000

Infranet controller 4500

Infranet controller 6000

Infranet controller 6500

Unified access control software

Juniper installer service client

Junos pulse client

Mobile system software

Pulse connect secure

Northstar controller

Trusted platform module firmware

Junos os evolved

Advanced threat protection

Virtual advanced threat protection

Contrail networking

Paragon active assurance control center

See all Products for Vendor Juniper

Copyright 2024, cxsecurity.com