CVE:CVE-2014-3823
CNNVD:CNNVD-201409-996
Juniper Networks Junos Pulse Secure Access Service（SSL VPN）是美国瞻博网络（Juniper Networks）公司的一种简单、直观的客户端。该客户端支持远程和移动用户用各种Web设备访问企业资源。
Juniper Networks Juniper Junos Pulse Secure Access Service (SSL VPN)设备with IVE OS中存在安全漏洞。远程攻击者可利用该漏洞实施点击劫持攻击。以下版本受到影响：Juniper Junos Pulse Secure Access Service (SSL VPN) 8.0r1之前8.0版本，7.4r5之前7.4版本，7.1r18之前7.1版本。
solution:Upgrade juniper junos_pulse_secure_access_service to a higher version than 7.1,7.1r1.1,7.1r2,7.1r3,7.1r4,7.1r5,7.1r6,7.1r7,7.1r8,7.1r9,7.1r10,7.1r11,7.1r12,7.1r13,7.1r14,7.1r15,7.4:r1.0,7.4:r2.0,7.4:r3.0,7.4:r4.0,8.0,and avoid the version 7.1,7.1r1.1,7.1r2,7.1r3,7.1r4,7.1r5,7.1r6,7.1r7,7.1r8,7.1r9,7.1r10,7.1r11,7.1r12,7.1r13,7.1r14,7.1r15,7.4:r1.0,7.4:r2.0,7.4:r3.0,7.4:r4.0,8.0