PT-2017-13763 · Pulse Secure · Pulse One On-Premise

Publicado 2017-09-29 · Atualizado 2017-10-06 · CVE-2017-14935

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pulse Secure Pulse One On-Premise versions 2.0.1649 and below

Description The issue allows remote users to query and obtain sensitive information due to improper validation of requests.

Recommendations For versions 2.0.1649 and below, update to a version above 2.0.1649 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-14935

Produtos afetados

Pulse One On-Premise

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-14935 · Nota de Segurança
• http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40971 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-14935 · Aviso do Fabricante