vulnerability

Pulse Secure Pulse Connect Secure: CVE-2019-11510: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.0RX (SA44101)

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
8	(AV:N/AC:L/Au:N/C:P/I:P/A:P)	2019-05-08	2020-10-28	2024-02-15

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Published

2019-05-08

Added

2020-10-28

Modified

2024-02-15

Description

In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .

Solution(s)

pulse-secure-pulse-connect-secure-upgrade-8_1r15_1pulse-secure-pulse-connect-secure-upgrade-8_2r12_1pulse-secure-pulse-connect-secure-upgrade-8_3r7_1pulse-secure-pulse-connect-secure-upgrade-9_0r4

References

BID-108073
CERT-VN-927237
CVE-2019-11510
https://attackerkb.com/topics/CVE-2019-11510
URL-https://forums.ivanti.com/s/article/SA44101?language=en_US

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today