SA40007 - 2014-09 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Secure Desktop client: User privilege escalation issue in Installer Service (CVE-2014-3811)

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A privilege escalation issue has been found and corrected in the Pulse Secure Installer Service client Windows platform only software. This issue could allow a non-administrator user t...

CVE-2014-3811

CVE-2014-3811 affects Juniper Installer Service (JIS) Client on Windows (7.x before 7.4R6) and Junos Pulse Client before 4.0R6, enabling local privilege escalation. Root cause is not detailed in the provided sources. Impact is high (local, full confidentiality/integrity/availability). Remediation...

Juniper Junos Pulse Client Privilege Escalation (JSA10644)

According to its self-reported version, the installation of Junos Pulse Client on the remote Windows host is version 4.0 prior to 4.0r6 or a version prior to 3.1r8. It is, therefore, affected by a privilege escalation vulnerability that allows a local attacker to gain administrative privileges vi...

Juniper Installer Service 7.4 < 7.4r6 Privilege Escalation (JSA10644)

According to its self-reported version, the installation of Juniper Installer Service on the remote Windows host is version 7.4 prior to 7.4r6. It is, therefore, affected by a privilege escalation vulnerability that allows a local user to gain administrative privileges. C Tenable Network Security...