Vulnerability in Juniper Fips Infranet Controller 6500
CVE-2014-3812
The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain sensitive information by sniffing the network.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.007 (51.1th percentile) — read the EPSS interpretation.
Affected products
- Juniper Fips_infranet_controller_6500
- Juniper Fips_secure_access_4000
- Juniper Fips_secure_access_4500
- Juniper Fips_secure_access_6000
- Juniper Fips_secure_access_6500
- Juniper Infranet_controller_4000
- Juniper Infranet_controller_4500
- Juniper Infranet_controller_6000
- Juniper Infranet_controller_6500
- Juniper Ive_os — versions 7.4, 8.0
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)