CVE-2015-7322 The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts t...
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the meeting, which allows remote attackers to enumerate valid meeting ids via a series of requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper pulse connect secure | = 7.1 | No fix listed |
| juniper pulse connect secure | = 7.4 | No fix listed |
| juniper pulse connect secure | = 8.0 | No fix listed |
| juniper pulse connect secure | = 8.1 | No fix listed |
References
- 1033685 vdb-entry
- kb.pulsesecure.net vendor-advisory
- profundis-labs.com exploit