CVE-2015-7322
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the…
Does this matter?
Lower severity and a low EPSS score (2.32%). Track it; it rarely justifies an emergency change on its own.
Description
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the meeting, which allows remote attackers to enumerate valid meeting ids via a series of requests.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 2.32% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- juniper/pulse connect secure
- Source
- cve@mitre.org
References
- http://www.securitytracker.com/id/1033685
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40053Vendor Advisory
- https://profundis-labs.com/advisories/CVE-2015-7322.txtExploit
- http://www.securitytracker.com/id/1033685
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40053Vendor Advisory
- https://profundis-labs.com/advisories/CVE-2015-7322.txtExploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.