CVE-2015-7323 The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote authenticated users to bypas...
LowCVSS 3.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote authenticated users to bypass intended access restrictions and log into arbitrary meetings by leveraging a meeting id and meetingAppSun.jar.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper pulse connect secure | = 7.1 | No fix listed |
| juniper pulse connect secure | = 7.4 | No fix listed |
| juniper pulse connect secure | = 8.0 | No fix listed |
| juniper pulse connect secure | = 8.1 | No fix listed |
References
- 20150925 CVE-2015-7323 - Secure Meeting (Pulse Collaboration) issue may allow authenticated users to bypass meeting authorization exploit mailing-list
- 1033684 vdb-entry
- kb.pulsesecure.net vendor-advisory
- packetstormsecurity.com exploit
- profundis-labs.com exploit