Description
The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain sensitive information by sniffing the network.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10628
Scores
EPSS
0.0018
EPSS Percentile
39.5%
Details
CWE
CWE-310
Status
published
Products (20)
juniper/fips_infranet_controller_6500
juniper/fips_secure_access_4000
juniper/fips_secure_access_4500
juniper/fips_secure_access_6000
juniper/fips_secure_access_6500
juniper/infranet_controller_4000
juniper/infranet_controller_4500
juniper/infranet_controller_6000
juniper/infranet_controller_6500
juniper/ive_os
7.4
... and 10 more
Published
Jun 13, 2014
Tracked Since
Feb 18, 2026