CVE-2015-7323

EUVD-2015-7248
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote authenticated users to bypass intended access restrictions and log into arbitrary meetings by leveraging a meeting id and meetingAppSun.jar.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.5 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
Affected Products (NVD)
VendorProductVersion
juniperpulse_connect_secure
7.1
juniperpulse_connect_secure
7.4
juniperpulse_connect_secure
8.0
juniperpulse_connect_secure
8.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://seclists.org/fulldisclosure/2015/Sep/98
http://www.securitytracker.com/id/1033684
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40054
https://packetstormsecurity.com/files/133711/Junos-Pulse-Secure-Meeting-8.0.5-Access-Bypass.html
https://profundis-labs.com/advisories/CVE-2015-7323.txt
http://seclists.org/fulldisclosure/2015/Sep/98
http://www.securitytracker.com/id/1033684
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40054
https://packetstormsecurity.com/files/133711/Junos-Pulse-Secure-Meeting-8.0.5-Access-Bypass.html
https://profundis-labs.com/advisories/CVE-2015-7323.txt