Improper input validation in Juniper Junos Pulse Secure Access Service

CVE-2014-3823

The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.010 (57.9th percentile) — read the EPSS interpretation.

Affected products

Juniper Junos_pulse_secure_access_service — versions 7.1, 7.1r1.1, 7.1r2
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)