Lucene search

MitreCVE-2014-2292

HistoryMar 14, 2014 - 3:55 p.m.

CVE-2014-2292

2014-03-1415:55:05

mitre

web.nvd.nist.gov

cve-2014-2292

juniper

junos pulse

ssl vpn

security vulnerability

privilege escalation

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

Percentile

5.1%

JSON

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors.

Affected configurations

Nvd

Node

juniperive_osMatch7.1

juniperive_osMatch7.3

juniperive_osMatch7.4

juniperive_osMatch8.0

VendorProductVersionCPE
juniperive_os7.1cpe:2.3:o:juniper:ive_os:7.1:*:*:*:*:*:*:*
juniperive_os7.3cpe:2.3:o:juniper:ive_os:7.3:*:*:*:*:*:*:*
juniperive_os7.4cpe:2.3:o:juniper:ive_os:7.4:*:*:*:*:*:*:*
juniperive_os8.0cpe:2.3:o:juniper:ive_os:8.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
juniper	ive_os	7.1	cpe:2.3:o:juniper:ive_os:7.1:::::::*
juniper	ive_os	7.3	cpe:2.3:o:juniper:ive_os:7.3:::::::*
juniper	ive_os	7.4	cpe:2.3:o:juniper:ive_os:7.4:::::::*
juniper	ive_os	8.0	cpe:2.3:o:juniper:ive_os:8.0:::::::*

References

kb.juniper.net/InfoCenter/index?page=content&id=JSA10616

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2014-2292