Code injection

2015-10-0515:59:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.2%

JSON

The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the meeting, which allows remote attackers to enumerate valid meeting ids via a series of requests.

CPENameOperatorVersion
pulse_connect_secureeq8.0
pulse_connect_secureeq7.4
pulse_connect_secureeq8.1
pulse_connect_secureeq7.1

Name	Operator	Version
pulse_connect_secure	eq	8.0
pulse_connect_secure	eq	7.4
pulse_connect_secure	eq	8.1
pulse_connect_secure	eq	7.1

References

www.securitytracker.com/id/1033685

kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40053

profundis-labs.com/advisories/CVE-2015-7322.txt