PT-2014-5518 · Juniper Networks · Junos Pulse Client+1

Publicado 2014-09-29 · Atualizado 2014-09-30 · CVE-2014-3811

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Juniper Installer Service (JIS) Client versions prior to 7.4R6 Junos Pulse Client versions prior to 4.0R6

Description The issue allows local users to gain privileges via unspecified vectors.

Recommendations For Juniper Installer Service (JIS) Client versions prior to 7.4R6, update to version 7.4R6 or later. For Junos Pulse Client versions prior to 4.0R6, update to version 4.0R6 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-3811

Produtos afetados

Juniper Installer Service (Jis) Client

Junos Pulse Client

Referências · 2

• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10644 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-3811 · Nota de Segurança