Unscored severity · published Aug 11, 2015
CVE-2015-5369
Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished TLS handshake message, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted Finished message.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PC
Pulse Connect Secure · Juniper
5.1; 7.1; 7.4; 8.0; 8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5369
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5369
kb.juniper.net
http://kb.juniper.net/InfoCenter/index?page=content&id=TSB16756
www.securitytracker.com
http://www.securitytracker.com/id/1033166
kb.pulsesecure.net
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40004
vivaldi.net
https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends
More from Pulse Connect Secure
–
CVE-2015-7323
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote…
–
CVE-2015-7322
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different…