CVE-2013-3970
Medium
Description
Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka UAC) with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority (CA) certificate in the Trusted Server CAs list, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging control over that test CA.
SeverityMedium
CVSS4.3
Exploit probability—
Product
Juniper Junos Pulse Secure Access Service
PublishedJun 13, 2013
First seenJun 13, 2013
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos_pulse_secure_access_service | 7.0r2, 7.0r3, 7.0r4, 7.0r5, 7.0r5.1, 7.0r6, 7.0r7, 7.0r8, 7.1r1, 7.1r1.1, 7.1r2, 7.1r3, 7.1r4, 7.1r5 | — |
| juniper junos_pulse_access_control_service | 4.1r1, 4.1r1.1, 4.1r2, 4.1r3, 4.1r4, 4.1r5 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.