Vulnerability Name:

CVE-2014-3811 (CCN-95980)

Assigned:2014-09-10
Published:2014-09-10
Updated:2014-09-30
Summary:Juniper Installer Service (JIS) Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors.
CVSS v3 Severity:9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
5.3 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
5.3 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-264
Vulnerability Consequences:Gain Privileges
References:Source: MITRE
Type: CNA
CVE-2014-3811

Source: CCN
Type: Juniper Networks Security Bulletin JSA10644
Junos Pulse Secure Access Service (SSL VPN) and Junos Pulse Client: User privilege escalation issue in Windows Juniper Installer Service (JIS) (CVE-2014-3811)

Source: CCN
Type: BID-69797
Multiple Juniper Junos Products CVE-2014-3811 Local Privilege Escalation Vulnerability

Source: XF
Type: UNKNOWN
junos-pulse-cve20143811-priv-esc(95980)

Source: CONFIRM
Type: Vendor Advisory
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10644

Vulnerable Configuration:Configuration 1:
  • cpe:/a:juniper:juniper_installer_service_client:7.1:r1.1:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r10:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r11:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r12:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r13:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r14:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r15:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r16:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r17:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r2:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r3:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r4:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r4.1:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r4.2:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r5:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r6:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r7:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r8:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.1:r9:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.2:r1.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.2:r1.1:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.2:r10.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.2:r11.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.2:r12.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.2:r2.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.2:r3.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.2:r4.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.2:r5.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.2:r8.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.2:r9.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r1.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r10.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r11.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r2.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r3.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r4.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r4.1:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r5.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r6.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r7.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r8.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r9.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.3:r9.1:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.4:r1.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.4:r2.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.4:r3.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.4:r4.0:*:*:*:*:*:*
  • OR cpe:/a:juniper:juniper_installer_service_client:7.4:r5.0:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/a:juniper:junos_pulse_client:4.0:r1:*:*:*:*:*:*
  • OR cpe:/a:juniper:junos_pulse_client:4.0:r2:*:*:*:*:*:*
  • OR cpe:/a:juniper:junos_pulse_client:4.0:r3:*:*:*:*:*:*
  • OR cpe:/a:juniper:junos_pulse_client:4.0:r4:*:*:*:*:*:*
  • OR cpe:/a:juniper:junos_pulse_client:*:r5:*:*:*:*:*:* (Version <= 4.0)

    • Configuration CCN 1:
  • cpe:/o:juniper:ive_os:7.1:*:*:*:*:*:*:*
  • OR cpe:/o:juniper:unified_access_control_software:5.0:*:*:*:*:*:*:*
  • OR cpe:/o:juniper:unified_access_control_software:4.4:*:*:*:*:*:*:*
  • OR cpe:/o:juniper:ive_os:7.4:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:secure_access_700:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:secure_access_2500:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:fips_secure_access_4000:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:secure_access_4500:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:fips_secure_access_4500:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:fips_secure_access_6000:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:fips_secure_access_6500:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:mag2600_gateway:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:mag4610_gateway:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:mag6610_gateway:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:mag6611_gateway:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    juniper juniper installer service client 7.1 r1.1
    juniper juniper installer service client 7.1 r10
    juniper juniper installer service client 7.1 r11
    juniper juniper installer service client 7.1 r12
    juniper juniper installer service client 7.1 r13
    juniper juniper installer service client 7.1 r14
    juniper juniper installer service client 7.1 r15
    juniper juniper installer service client 7.1 r16
    juniper juniper installer service client 7.1 r17
    juniper juniper installer service client 7.1 r2
    juniper juniper installer service client 7.1 r3
    juniper juniper installer service client 7.1 r4
    juniper juniper installer service client 7.1 r4.1
    juniper juniper installer service client 7.1 r4.2
    juniper juniper installer service client 7.1 r5
    juniper juniper installer service client 7.1 r6
    juniper juniper installer service client 7.1 r7
    juniper juniper installer service client 7.1 r8
    juniper juniper installer service client 7.1 r9
    juniper juniper installer service client 7.2 r1.0
    juniper juniper installer service client 7.2 r1.1
    juniper juniper installer service client 7.2 r10.0
    juniper juniper installer service client 7.2 r11.0
    juniper juniper installer service client 7.2 r12.0
    juniper juniper installer service client 7.2 r2.0
    juniper juniper installer service client 7.2 r3.0
    juniper juniper installer service client 7.2 r4.0
    juniper juniper installer service client 7.2 r5.0
    juniper juniper installer service client 7.2 r8.0
    juniper juniper installer service client 7.2 r9.0
    juniper juniper installer service client 7.3 r1.0
    juniper juniper installer service client 7.3 r10.0
    juniper juniper installer service client 7.3 r11.0
    juniper juniper installer service client 7.3 r2.0
    juniper juniper installer service client 7.3 r3.0
    juniper juniper installer service client 7.3 r4.0
    juniper juniper installer service client 7.3 r4.1
    juniper juniper installer service client 7.3 r5.0
    juniper juniper installer service client 7.3 r6.0
    juniper juniper installer service client 7.3 r7.0
    juniper juniper installer service client 7.3 r8.0
    juniper juniper installer service client 7.3 r9.0
    juniper juniper installer service client 7.3 r9.1
    juniper juniper installer service client 7.4 r1.0
    juniper juniper installer service client 7.4 r2.0
    juniper juniper installer service client 7.4 r3.0
    juniper juniper installer service client 7.4 r4.0
    juniper juniper installer service client 7.4 r5.0
    juniper junos pulse client 4.0 r1
    juniper junos pulse client 4.0 r2
    juniper junos pulse client 4.0 r3
    juniper junos pulse client 4.0 r4
    juniper junos pulse client * r5
    juniper ive os 7.1
    juniper unified access control software 5.0
    juniper unified access control software 4.4
    juniper ive os 7.4
    juniper secure access 700 -
    juniper secure access 2500 -
    juniper fips secure access 4000 -
    juniper secure access 4500 -
    juniper fips secure access 4500 -
    juniper fips secure access 6000 -
    juniper fips secure access 6500 -
    juniper mag2600 gateway -
    juniper mag4610 gateway -
    juniper mag6610 gateway -
    juniper mag6611 gateway -