NVD

Id
27967  
Name
CVE-2015-7322  
Description
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the meeting, which allows remote attackers to enumerate valid meeting ids via a series of requests.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-10-05  
Modified Date
2016-12-07  
Seq
2015-7322  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147071 27967 CVE-2015-7322 1033685  View
147072 27967 CVE-2015-7322 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40053  View
147073 27967 CVE-2015-7322 https://profundis-labs.com/advisories/CVE-2015-7322.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9771 JVNDB-2015-005091 Pulse Connect Secure の Secure Meeting における有効な会議 ID を列挙される脆弱性 Pulse Connect Secure (旧 Juniper Junos Pulse) の Secure Meeting (Pulse Collaboration) は、会議の状況に応じて会議参加の試みに対して別のメッセージを提供するため、有効な会議 ID を列挙される脆弱性が存在します。 CVE-2015-7322 84547 CVE-2015-7322 27967 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005091.html 2015-10-05 2015-10-07 View