CVE-2015-7323
First published: Mon Oct 05 2015(Updated: )
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote authenticated users to bypass intended access restrictions and log into arbitrary meetings by leveraging a meeting id and meetingAppSun.jar.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pulse Secure Pulse Connect Secure | =7.1 | |
| Pulse Secure Pulse Connect Secure | =7.4 | |
| Pulse Secure Pulse Connect Secure | =8.0 | |
| Pulse Secure Pulse Connect Secure | =8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/fulldisclosure/2015/Sep/98
- http://www.securitytracker.com/id/1033684
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40054
- https://packetstormsecurity.com/files/133711/Junos-Pulse-Secure-Meeting-8.0.5-Access-Bypass.html
- https://profundis-labs.com/advisories/CVE-2015-7323.txt
Frequently Asked Questions
What is the severity of CVE-2015-7323?
CVE-2015-7323 has a high severity rating due to its potential to allow unauthorized access to meetings.
How do I fix CVE-2015-7323?
To fix CVE-2015-7323, upgrade Pulse Connect Secure to versions 7.1R22.1, 7.4, 8.0R11, or 8.1R3 or later.
Who is affected by CVE-2015-7323?
The vulnerability CVE-2015-7323 impacts users of Pulse Connect Secure versions prior to 7.1R22.1, 7.4, 8.0R11, and 8.1R3.
What type of attack does CVE-2015-7323 enable?
CVE-2015-7323 enables remote authenticated users to bypass access restrictions to log into arbitrary meetings.
Is there a workaround for CVE-2015-7323?
Unfortunately, there is no known workaround for CVE-2015-7323, and upgrading is the recommended action.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/juniper
- canonical/pulse secure pulse connect secure
- version/pulse secure pulse connect secure/7.1
- version/pulse secure pulse connect secure/7.4
- version/pulse secure pulse connect secure/8.0
- version/pulse secure pulse connect secure/8.1