PT-2017-13763 · Pulse Secure · Pulse One On-Premise

Published 2017-09-29 · Updated 2017-10-06 · CVE-2017-14935

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pulse Secure Pulse One On-Premise versions 2.0.1649 and below

Description The issue allows remote users to query and obtain sensitive information due to improper validation of requests.

Recommendations For versions 2.0.1649 and below, update to a version above 2.0.1649 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-14935

Affected Products

Pulse One On-Premise

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-14935 · Security Note
• http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40971 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-14935 · Vendor Advisory