PT-2019-12364 · Pulse · Pulse Connect Secure

Published 2019-04-26 · Updated 2024-02-27 · CVE-2019-11541

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AC:L/AV:N/A:L/C:L/I:L/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Pulse Connect Secure versions 9.0RX before 9.0R3.4 Pulse Connect Secure versions 8.3RX before 8.3R7.1 Pulse Connect Secure versions 8.2RX before 8.2R12.1

Description The issue affects users of SAML authentication with the Reuse Existing NC (Pulse) Session option, potentially leading to authentication leaks.

Recommendations For Pulse Connect Secure version 9.0RX before 9.0R3.4, update to version 9.0R3.4 or later. For Pulse Connect Secure version 8.3RX before 8.3R7.1, update to version 8.3R7.1 or later. For Pulse Connect Secure version 8.2RX before 8.2R12.1, update to version 8.2R12.1 or later.

Fix

Related Identifiers

CVE-2019-11541

Affected Products

Pulse Connect Secure

References · 6

• https://osv.dev/vulnerability/CVE-2019-11541 · Vendor Advisory
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11541 · Security Note
• https://kb.cert.org/vuls/id/927237 · Note
• http://securityfocus.com/bid/108073 · Note
• https://t.me/cvenotify/72491 · Telegram Post