CVE-2014-2292 : Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN)

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors.

Published 2014-03-14 15:55:06

Updated 2014-03-17 13:57:50

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2014-2292

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-2292

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

Products affected by CVE-2014-2292

Juniper » Ive Os » Version: 7.3
cpe:2.3:o:juniper:ive_os:7.3:*:*:*:*:*:*:*
Matching versions
Juniper » Ive Os » Version: 7.1
cpe:2.3:o:juniper:ive_os:7.1:*:*:*:*:*:*:*
Matching versions
Juniper » Ive Os » Version: 7.4
cpe:2.3:o:juniper:ive_os:7.4:*:*:*:*:*:*:*
Matching versions
Juniper » Ive Os » Version: 8.0
cpe:2.3:o:juniper:ive_os:8.0:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2014-2292

Exploit prediction scoring system (EPSS) score for CVE-2014-2292

CVSS scores for CVE-2014-2292

References for CVE-2014-2292

Products affected by CVE-2014-2292