CVE:CVE-2014-3811
CNNVD:CNNVD-201409-1107
Juniper Networks Juniper Installer Service（JIS）Client和Junos Pulse Client都是美国瞻博网络（Juniper Networks）公司的产品。JIS Client是一款安装服务客户端；Junos Pulse Client是Junos Pulse（端点软件平台）的一款客户端。
Juniper Networks Junos Pulse Client 4.0R6之前版本和基于Windows平台的JIS Client 7.4R6之前7.x版本中存在安全漏洞。本地攻击者可利用该漏洞获取权限。
solution:Upgrade juniper juniper_installer_service_client to a higher version than 7.1:r1.1,7.1:r10,7.1:r11,7.1:r12,7.1:r13,7.1:r14,7.1:r15,7.1:r16,7.1:r17,7.1:r2,7.1:r3,7.1:r4,7.1:r4.1,7.1:r4.2,7.1:r5,7.1:r6,7.1:r7,7.1:r8,7.1:r9,7.2:r1.0,7.2:r1.1,7.2:r10.0,7.2:r11.0,7.2:r12.0,7.2:r2.0,7.2:r3.0,7.2:r4.0,7.2:r5.0,7.2:r8.0,7.2:r9.0,7.3:r1.0,7.3:r10.0,7.3:r11.0,7.3:r2.0,7.3:r3.0,7.3:r4.0,7.3:r4.1,7.3:r5.0,7.3:r6.0,7.3:r7.0,7.3:r8.0,7.3:r9.0,7.3:r9.1,7.4:r1.0,7.4:r2.0,7.4:r3.0,7.4:r4.0,7.4:r5.0,and avoid the version 7.1:r1.1,7.1:r10,7.1:r11,7.1:r12,7.1:r13,7.1:r14,7.1:r15,7.1:r16,7.1:r17,7.1:r2,7.1:r3,7.1:r4,7.1:r4.1,7.1:r4.2,7.1:r5,7.1:r6,7.1:r7,7.1:r8,7.1:r9,7.2:r1.0,7.2:r1.1,7.2:r10.0,7.2:r11.0,7.2:r12.0,7.2:r2.0,7.2:r3.0,7.2:r4.0,7.2:r5.0,7.2:r8.0,7.2:r9.0,7.3:r1.0,7.3:r10.0,7.3:r11.0,7.3:r2.0,7.3:r3.0,7.3:r4.0,7.3:r4.1,7.3:r5.0,7.3:r6.0,7.3:r7.0,7.3:r8.0,7.3:r9.0,7.3:r9.1,7.4:r1.0,7.4:r2.0,7.4:r3.0,7.4:r4.0,7.4:r5.0; Upgrade juniper junos_pulse_client to a higher version than *:r5,4.0:r1,4.0:r2,4.0:r3,4.0:r4,and avoid the version *:r5,4.0:r1,4.0:r2,4.0:r3,4.0:r4