Lucene search

[email protected]CVE-2014-2292

HistoryMar 14, 2014 - 3:55 p.m.

CVE-2014-2292

2014-03-1415:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2014-2292

juniper

junos pulse

ssl vpn

security vulnerability

privilege escalation

nvd

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors.

CPENameOperatorVersion
juniper:ive_osjuniper ive oseq7.3
juniper:ive_osjuniper ive oseq8.0
juniper:ive_osjuniper ive oseq7.1
juniper:ive_osjuniper ive oseq7.4

CPE	Name	Operator	Version
juniper:ive_os	juniper ive os	eq	7.3
juniper:ive_os	juniper ive os	eq	8.0
juniper:ive_os	juniper ive os	eq	7.1
juniper:ive_os	juniper ive os	eq	7.4

References

kb.juniper.net/InfoCenter/index?page=content&id=JSA10616

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2014-2292

cvelist1 nessus1 prion1