Multiple Juniper Junos Products Ciphersuite Specification Information Disclosure Weakness
BID:68192
Info
Multiple Juniper Junos Products Ciphersuite Specification Information Disclosure Weakness
| Bugtraq ID: | 68192 |
| Class: | Design Error |
| CVE: |
CVE-2014-3812 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2014 12:00AM |
| Updated: | Jun 13 2014 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Juniper Unified Access Control Software 5.0 Juniper Unified Access Control Software 4.4 Juniper Secure Access 700 Juniper Secure Access 4500 Juniper Secure Access 2500 Juniper Mag6611 Gateway 0 Juniper Mag6610 Gateway 0 Juniper Mag4610 Gateway 0 Juniper Mag2600 Gateway 0 Juniper IVE OS 8.0 Juniper IVE OS 7.4 Juniper Infranet Controller 6500 Juniper Infranet Controller 6000 Juniper Infranet Controller 4500 Juniper Infranet Controller 4000 Juniper FIPS Secure Access 6500 Juniper FIPS Secure Access 6000 Juniper FIPS Secure Access 4500 Juniper FIPS Secure Access 4000 Juniper Fips Infranet Controller 6500 - |
| Not Vulnerable: |
Juniper Junos Pulse Access Control Service (UAC) 5.0R1 Juniper Junos Pulse Access Control Service (UAC) 4.4r5 Juniper IVE OS 8.0r1 Juniper IVE OS 7.4R5 |
Discussion
Multiple Juniper Junos Products Ciphersuite Specification Information Disclosure Weakness
Junos Pulse Secure Access Service and Access Control Service are prone to a security weakness that may allow attackers to downgrade the ciphersuite.
Successfully exploiting this issue in conjunction with other latent vulnerabilities may allow attackers to gain access to sensitive information that may aid in further attacks.
Junos Pulse Secure Access Service and Access Control Service are prone to a security weakness that may allow attackers to downgrade the ciphersuite.
Successfully exploiting this issue in conjunction with other latent vulnerabilities may allow attackers to gain access to sensitive information that may aid in further attacks.
Exploit / POC
Multiple Juniper Junos Products Ciphersuite Specification Information Disclosure Weakness
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple Juniper Junos Products Ciphersuite Specification Information Disclosure Weakness
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple Juniper Junos Products Ciphersuite Specification Information Disclosure Weakness
References:
References:
- Juniper HomePage (Juniper)
- 2014-06 Security Bulletin: Junos Pulse Secure Access Service (SSL VPN) and Junos (Juniper Networks)