Описание
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote authenticated users to bypass intended access restrictions and log into arbitrary meetings by leveraging a meeting id and meetingAppSun.jar.
Ссылки
- Exploit
- Vendor Advisory
- Exploit
- Exploit
- Exploit
- Vendor Advisory
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:juniper:pulse_connect_secure:7.1:*:*:*:*:*:*:*
cpe:2.3:a:juniper:pulse_connect_secure:7.4:*:*:*:*:*:*:*
cpe:2.3:a:juniper:pulse_connect_secure:8.0:*:*:*:*:*:*:*
cpe:2.3:a:juniper:pulse_connect_secure:8.1:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00369
Низкий
3.5 Low
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
больше 3 лет назад
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote authenticated users to bypass intended access restrictions and log into arbitrary meetings by leveraging a meeting id and meetingAppSun.jar.
EPSS
Процентиль: 58%
0.00369
Низкий
3.5 Low
CVSS2
Дефекты
CWE-264