Juniper ive OS Network Connect/Pulse Cross-Site Request Forgery Vulnerability

Release date:
Updated on:

Affected Systems:
Juniper Networks ive OS Software 6.x
Description:
--------------------------------------------------------------------------------
Juniper ive OS is the Secure Access of Juniper Networks and is the operating system running on enterprise-level SSL VPN Access devices.

Juniper ive OS has a security vulnerability in implementation, which can be exploited by malicious users to execute cross-site scripting attacks.

<* Source: vendor

Link: http://secunia.com/advisories/48720/

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Juniper Networks
----------------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.juniper.net/