PT-2018-10235 · Pulse Secure · Pulse Secure Desktop Client

Matt Bush · Published 2018-11-29 · Updated 2020-08-24 · CVE-2018-11002

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions 5.3 up to and including 6.0 build 1769

Description The issue is related to Insecure Permissions in the Pulse Secure Desktop Client on Windows.

Recommendations For Pulse Secure Desktop Client versions 5.3 up to and including 6.0 build 1769, update to a version with secure permissions to resolve the issue.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-11002

Affected Products

Pulse Secure Desktop Client

References · 4

• 🔥 https://themissinglink.com.au/security-advisories-cve-2017-16878-0 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-11002 · Security Note
• https://osv.dev/vulnerability/CVE-2018-11002 · Vendor Advisory
• http://securityfocus.com/bid/106054 · Note