PT-2017-11812 · Pulse · Pulse Connect Secure

Publicado 2017-07-12 · Atualizado 2017-07-20 · CVE-2017-11193

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pulse Connect Secure version 8.3R1

Description The issue concerns a lack of protection against CSRF in the diag.cgi file, which is used for running various commands such as ping, ping6, traceroute, traceroute6, nslookup, arp, and Portprobe. This lack of protection can allow an attacker to run these commands against any IP address if they can trick an administrator into visiting a malicious page designed to exploit this weakness.

Recommendations For Pulse Connect Secure version 8.3R1, consider disabling access to the diag.cgi file until a patch is available to prevent potential exploitation. Restrict access to the administrative panel to minimize the risk of an attacker tricking an admin into visiting a malicious CSRF page.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2017-11193

Produtos afetados

Pulse Connect Secure

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-11193 · Nota de Segurança
• http://sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf · Nota
• http://securityfocus.com/bid/99621 · Nota
• https://twitter.com/sxcurity/status/884556905145937921 · Nota
• https://osv.dev/vulnerability/CVE-2017-11193 · Aviso do Fabricante