CVE-2014-3812

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-3812
The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain sensitive information by sniffing the network.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10628 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:juniper:ive_os:7.4:*:*:*:*:*:*:*
cpe:2.3:o:juniper:ive_os:8.0:*:*:*:*:*:*:*
cpe:2.3:o:juniper:unified_access_control_software:4.4:*:*:*:*:*:*:*
cpe:2.3:o:juniper:unified_access_control_software:5.0:*:*:*:*:*:*:*
OR cpe:2.3:h:juniper:fips_infranet_controller_6500:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:fips_secure_access_4000:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:fips_secure_access_4500:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:fips_secure_access_6000:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:fips_secure_access_6500:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:infranet_controller_4000:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:infranet_controller_4500:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:infranet_controller_6000:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:infranet_controller_6500:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mag2600_gateway:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mag4610_gateway:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mag6610_gateway:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mag6611_gateway:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:secure_access_2500:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:secure_access_4500:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:secure_access_700:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2014-06-13 14:55

Updated : 2024-02-04 18:35

NVD link : CVE-2014-3812

Mitre link : CVE-2014-3812

CVE.ORG link : CVE-2014-3812

JSON object : View

Products Affected

juniper

  • fips_infranet_controller_6500
  • secure_access_700
  • ive_os
  • infranet_controller_6500
  • mag6610_gateway
  • secure_access_2500
  • fips_secure_access_4500
  • fips_secure_access_6000
  • infranet_controller_4000
  • unified_access_control_software
  • fips_secure_access_4000
  • infranet_controller_4500
  • infranet_controller_6000
  • mag6611_gateway
  • mag2600_gateway
  • mag4610_gateway
  • secure_access_4500
  • fips_secure_access_6500
CWE
CWE-310

Cryptographic Issues