Rapid7

vulnerability

Pulse Secure Pulse Connect Secure: CVE-2019-11510: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.0RX (SA44101)

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
May 8, 2019
Added
Oct 28, 2020
Modified
Feb 15, 2024

Description

In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .

Solutions

pulse-secure-pulse-connect-secure-upgrade-8_1r15_1pulse-secure-pulse-connect-secure-upgrade-8_2r12_1pulse-secure-pulse-connect-secure-upgrade-8_3r7_1pulse-secure-pulse-connect-secure-upgrade-9_0r4
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.