CVEvulnerability
CVE-2015-7322
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-10-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the meeting, which allows remote attackers to enumerate valid meeting ids via a series of requests.
Affected configurations
• juniper pulse connect secure 7.1
• juniper pulse connect secure 7.4
• juniper pulse connect secure 8.0
• juniper pulse connect secure 8.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securitytracker.com/id/1033685 www.securitytracker.com
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40053 Vendor Advisory
- https://profundis-labs.com/advisories/CVE-2015-7322.txt Exploit
- http://www.securitytracker.com/id/1033685 www.securitytracker.com
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40053 Vendor Advisory
- https://profundis-labs.com/advisories/CVE-2015-7322.txt Exploit