rewindex

RewindexCVEs

CVE-2019-11510: Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

Critical · CVSS 9.9 (CVSS 3.1)KEV known exploitedEPSS 100.0%, 100th percentilePublished Updated Assigner: mitre

In CISA’s Known Exploited Vulnerabilities catalog: Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability.

Added , federal remediation due . Known ransomware use: Known.

Required action: Apply updates per vendor instructions.

Description

In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .

Vector CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

Ivanti: Pulse Connect Secure

References

All CVEsMarkdownJSON