PT-2019-3001 · Pulse Secure · Pulse Connect Secure

Meh Chang + 1 · Publicado 2019-03-22 · Atualizado 2026-06-15 · CVE-2019-11510

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pulse Secure Pulse Connect Secure (PCS) versions 8.2 through 8.2R12.1 Pulse Secure Pulse Connect Secure (PCS) versions 8.3 through 8.3R7.1 Pulse Secure Pulse Connect Secure (PCS) versions 9.0 through 9.0R3.4

Description The issue is related to errors in permission handling, allowing an unauthenticated remote attacker to send a specially crafted URI and perform an arbitrary file reading. This can lead to the disclosure of active users and their plain-text credentials. Over 2,500 Pulse Secure VPN endpoints are potentially affected.

Recommendations For Pulse Secure Pulse Connect Secure (PCS) versions 8.2 through 8.2R12.1, update to version 8.2R12.1 or later. For Pulse Secure Pulse Connect Secure (PCS) versions 8.3 through 8.3R7.1, update to version 8.3R7.1 or later. For Pulse Secure Pulse Connect Secure (PCS) versions 9.0 through 9.0R3.4, update to version 9.0R3.4 or later. As a temporary workaround, consider restricting access to the vulnerable URI endpoint until a patch is available.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-275

CWE-22

Identificadores relacionados

BDU:2019-02980

CVE-2019-11510

Produtos afetados

Pulse Connect Secure

Referências · 69

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/pulse_secure_file_disclosure.rb · Exploit
• 🔥 https://github.com/projectzeroindia/CVE-2019-11510 · Exploit
• 🔥 https://github.com/BishopFox/pwn-pulse · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-11510-1 · Exploit
• 🔥 https://github.com/imjdl/CVE-2019-11510-poc · Exploit
• 🔥 https://github.com/cisagov/check-your-pulse · Exploit
• 🔥 https://github.com/r00tpgp/http-pulse_ssl_vpn.nse · Exploit
• 🔥 https://github.com/aqhmal/pulsexploit · Exploit
• 🔥 https://github.com/es0/CVE-2019-11510_poc · Exploit
• 🔥 https://github.com/34zY/APT-Backpack · Exploit
• 🔥 https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study · Exploit
• 🔥 https://exploit-db.com/exploits/47297 · Exploit
• 🔥 http://packetstormsecurity.com/files/154176/Pulse-Secure-SSL-VPN-8.1R15.1-8.2-8.3-9.0-Arbitrary-File-Disclosure.html · Exploit
• https://t.me/cvenotify/67391 · Publicação no Telegram
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 · Aviso do Fabricante