CVE-2015-7323
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote authenticated users to bypass intended access restrictions and log into arbitrary…
Does this matter?
Lower severity and a low EPSS score (1.66%). Track it; it rarely justifies an emergency change on its own.
Description
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote authenticated users to bypass intended access restrictions and log into arbitrary meetings by leveraging a meeting id and meetingAppSun.jar.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:P/I:N/A:N
- EPSS
- 1.66% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- juniper/pulse connect secure
- Source
- cve@mitre.org
References
- http://seclists.org/fulldisclosure/2015/Sep/98Exploit
- http://www.securitytracker.com/id/1033684
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40054Vendor Advisory
- https://packetstormsecurity.com/files/133711/Junos-Pulse-Secure-Meeting-8.0.5-Access-Bypass.htmlExploit
- https://profundis-labs.com/advisories/CVE-2015-7323.txtExploit
- http://seclists.org/fulldisclosure/2015/Sep/98Exploit
- http://www.securitytracker.com/id/1033684
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40054Vendor Advisory
- https://packetstormsecurity.com/files/133711/Junos-Pulse-Secure-Meeting-8.0.5-Access-Bypass.htmlExploit
- https://profundis-labs.com/advisories/CVE-2015-7323.txtExploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.