CVE-2015-7322

2015-10-0515:59:00

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.004

Percentile

74.2%

JSON

The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the meeting, which allows remote attackers to enumerate valid meeting ids via a series of requests.

Affected configurations

Nvd

Node

juniperpulse_connect_secureMatch7.1

juniperpulse_connect_secureMatch7.4

juniperpulse_connect_secureMatch8.0

juniperpulse_connect_secureMatch8.1

VendorProductVersionCPE
juniperpulse_connect_secure7.1cpe:2.3:a:juniper:pulse_connect_secure:7.1:*:*:*:*:*:*:*
juniperpulse_connect_secure7.4cpe:2.3:a:juniper:pulse_connect_secure:7.4:*:*:*:*:*:*:*
juniperpulse_connect_secure8.0cpe:2.3:a:juniper:pulse_connect_secure:8.0:*:*:*:*:*:*:*
juniperpulse_connect_secure8.1cpe:2.3:a:juniper:pulse_connect_secure:8.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
juniper	pulse_connect_secure	7.1	cpe:2.3:a:juniper:pulse_connect_secure:7.1:::::::*
juniper	pulse_connect_secure	7.4	cpe:2.3:a:juniper:pulse_connect_secure:7.4:::::::*
juniper	pulse_connect_secure	8.0	cpe:2.3:a:juniper:pulse_connect_secure:8.0:::::::*
juniper	pulse_connect_secure	8.1	cpe:2.3:a:juniper:pulse_connect_secure:8.1:::::::*