CVE-2015-5369

Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished TLS handshake message, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted Finished message.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.securitytracker.com/id/1033166
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40004
http://kb.juniper.net/InfoCenter/index?page=content&id=TSB16756
https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:juniper:pulse_connect_secure:8.1:::::::*
	cpe:2.3:a:juniper:pulse_connect_secure:7.4:::::::*
	cpe:2.3:a:juniper:pulse_connect_secure:5.1:::::::*
	cpe:2.3:a:juniper:pulse_connect_secure:8.0:::::::*
	cpe:2.3:a:juniper:pulse_connect_secure:7.1:::::::*

OR	cpe:2.3:h:juniper:pcs6000:-:::::::*
	cpe:2.3:h:juniper:pcs6500:-:::::::*
	cpe:2.3:h:juniper:mag_pcs360:-:::::::*

Information

Published : 2015-08-11 07:59

Updated : 2015-08-11 11:25

NVD link : CVE-2015-5369

Mitre link : CVE-2015-5369

JSON object : View

CWE

CWE-17

DEPRECATED: Code

CWE-20

Improper Input Validation

Products Affected

juniper

mag_pcs360
pcs6000
pulse_connect_secure
pcs6500

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securitytracker.com/id/1033166", "name": "1033166", "tags": [], "refsource": "SECTRACK"}, {"url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40004", "name": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40004", "tags": [], "refsource": "CONFIRM"}, {"url": "http://kb.juniper.net/InfoCenter/index?page=content&id=TSB16756", "name": "http://kb.juniper.net/InfoCenter/index?page=content&id=TSB16756", "tags": [], "refsource": "CONFIRM"}, {"url": "https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends", "name": "https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends", "tags": [], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished TLS handshake message, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted Finished message."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-17"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-5369", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2015-08-11T14:59Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:juniper:pulse_connect_secure:8.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:juniper:pulse_connect_secure:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:juniper:pulse_connect_secure:5.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:juniper:pulse_connect_secure:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:juniper:pulse_connect_secure:7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:juniper:pcs6000:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:h:juniper:pcs6500:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:h:juniper:mag_pcs360:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2015-08-11T18:25Z"}

4.3 /10