CVE-2015-7322

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2015-10-05 · updated 2026-06-17
Weakness: CWE-200

Description

The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the meeting, which allows remote attackers to enumerate valid meeting ids via a series of requests.

Affected products

Juniper Pulse Connect Secure: 7.1, 7.4, 8.0, 8.1

References

http://www.securitytracker.com/id/1033685
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40053
https://profundis-labs.com/advisories/CVE-2015-7322.txt
http://www.securitytracker.com/id/1033685
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40053
https://profundis-labs.com/advisories/CVE-2015-7322.txt

Get alerted when CVE-2015-7322 or the next vulnerability affects your stack