CVE-2015-5369
N/A
N/A
Summary
Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished TLS handshake message, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted Finished message.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends
- http://kb.juniper.net/InfoCenter/index?page=content&id=TSB16756
- http://www.securitytracker.com/id/1033166
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40004
References
- https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends
- http://kb.juniper.net/InfoCenter/index?page=content&id=TSB16756
- http://www.securitytracker.com/id/1033166
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40004
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.