Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-3970
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3970

2022-10-0316:14:45
CWE-310
[email protected]
web.nvd.nist.gov
14
cve-2013-3970
juniper
junos pulse
ssl vpn
uac
certification authority
ca
ssl
vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.6%

JSON

Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka UAC) with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority (CA) certificate in the Trusted Server CAs list, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging control over that test CA.

Affected configurations

NVD
Node
juniperjunos_pulse_secure_access_serviceMatch7.0r2
OR
juniperjunos_pulse_secure_access_serviceMatch7.0r3
OR
juniperjunos_pulse_secure_access_serviceMatch7.0r4
OR
juniperjunos_pulse_secure_access_serviceMatch7.0r5
OR
juniperjunos_pulse_secure_access_serviceMatch7.0r5.1
OR
juniperjunos_pulse_secure_access_serviceMatch7.0r6
OR
juniperjunos_pulse_secure_access_serviceMatch7.0r7
OR
juniperjunos_pulse_secure_access_serviceMatch7.0r8
OR
juniperjunos_pulse_secure_access_serviceMatch7.1r1
OR
juniperjunos_pulse_secure_access_serviceMatch7.1r1.1
OR
juniperjunos_pulse_secure_access_serviceMatch7.1r2
OR
juniperjunos_pulse_secure_access_serviceMatch7.1r3
OR
juniperjunos_pulse_secure_access_serviceMatch7.1r4
OR
juniperjunos_pulse_secure_access_serviceMatch7.1r5
Node
juniperjunos_pulse_access_control_serviceMatch4.1r1
OR
juniperjunos_pulse_access_control_serviceMatch4.1r1.1
OR
juniperjunos_pulse_access_control_serviceMatch4.1r2
OR
juniperjunos_pulse_access_control_serviceMatch4.1r3
OR
juniperjunos_pulse_access_control_serviceMatch4.1r4
OR
juniperjunos_pulse_access_control_serviceMatch4.1r5
CPENameOperatorVersion
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.0r2
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.0r3
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.0r4
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.0r5
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.0r5.1
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.0r6
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.0r7
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.0r8
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.1r1
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.1r1.1
Rows per page:
1-10 of 141

Related

prion 1
cvelist 1
nvd 1
prion
prion
Design/Logic Flaw
2013-06-13 16:47:00
cvelist
cvelist
CVE-2013-3970
2022-10-03 16:14:45
nvd
nvd
CVE-2013-3970
2013-06-13 16:47:25

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.6%

JSON
Related for CVE-2013-3970
prion1cvelist1nvd1