PT-2014-5519 · Juniper Networks · Junos Pulse Secure Access Service+1

Publicado 2014-06-13 · Atualizado 2014-06-16 · CVE-2014-3812

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service (SSL VPN) versions prior to 7.4r5 Juniper Junos Pulse Secure Access Service (SSL VPN) versions 8.x prior to 8.0r1 Juniper Junos Pulse Access Control Service (UAC) versions prior to 4.4r5 Juniper Junos Pulse Access Control Service (UAC) versions 5.x prior to 5.0r1

Description The issue allows remote attackers to obtain sensitive information by sniffing the network, due to the use of weak encryption algorithms in enabled cipher suites.

Recommendations For Juniper Junos Pulse Secure Access Service (SSL VPN) versions prior to 7.4r5, update to version 7.4r5 or later. For Juniper Junos Pulse Secure Access Service (SSL VPN) versions 8.x prior to 8.0r1, update to version 8.0r1 or later. For Juniper Junos Pulse Access Control Service (UAC) versions prior to 4.4r5, update to version 4.4r5 or later. For Juniper Junos Pulse Access Control Service (UAC) versions 5.x prior to 5.0r1, update to version 5.0r1 or later.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2014-3812

Produtos afetados

Junos Pulse Access Control Service

Junos Pulse Secure Access Service

Referências · 2

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10628 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-3812 · Nota de Segurança