PT-2018-10235 · Pulse Secure · Pulse Secure Desktop Client

Matt Bush · Publicado 2018-11-29 · Atualizado 2020-08-24 · CVE-2018-11002

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions 5.3 up to and including 6.0 build 1769

Description The issue is related to Insecure Permissions in the Pulse Secure Desktop Client on Windows.

Recommendations For Pulse Secure Desktop Client versions 5.3 up to and including 6.0 build 1769, update to a version with secure permissions to resolve the issue.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-11002

Produtos afetados

Pulse Secure Desktop Client

Referências · 4

• 🔥 https://themissinglink.com.au/security-advisories-cve-2017-16878-0 · Exploit
• http://securityfocus.com/bid/106054 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-11002 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-11002 · Aviso do Fabricante