The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain sensitive information by sniffing the network.
                
            References
                    | Link | Resource | 
|---|---|
| http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10628 | Vendor Advisory | 
| http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10628 | Vendor Advisory | 
Configurations
                    Configuration 1 (hide)
| AND | 
            
            
 
  | 
    
History
                    21 Nov 2024, 02:08
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10628 - Vendor Advisory | 
Information
                Published : 2014-06-13 14:55
Updated : 2025-04-12 10:46
NVD link : CVE-2014-3812
Mitre link : CVE-2014-3812
CVE.ORG link : CVE-2014-3812
JSON object : View
Products Affected
                juniper
- infranet_controller_6000
 - secure_access_4500
 - ive_os
 - fips_infranet_controller_6500
 - secure_access_700
 - secure_access_2500
 - infranet_controller_4000
 - mag2600_gateway
 - unified_access_control_software
 - mag6611_gateway
 - infranet_controller_6500
 - fips_secure_access_4500
 - mag6610_gateway
 - infranet_controller_4500
 - fips_secure_access_4000
 - fips_secure_access_6500
 - mag4610_gateway
 - fips_secure_access_6000
 
CWE
                
                    
                        
                        CWE-310
                        
            Cryptographic Issues
