CVE-2013-3970

Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka…

published June 13, 2013

CVSS
—
EPSS
0%
Percentile
41.1
In the wild
Unconfirmed
What it is

Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka UAC) with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority (CA) certificate in the Trusted Server CAs list, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging control over that test CA.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00488 · 41.1th percentile
Published
2013-06-13T00:00Z
EPSS history
Timeline
  • 13 JUN 00:00Z
    Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka…
    cvelistv5