PT-2019-3001 · Pulse Secure · Pulse Connect Secure

Meh Chang + 1 · Published 2019-03-22 · Updated 2026-06-15 · CVE-2019-11510

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pulse Secure Pulse Connect Secure (PCS) versions 8.2 through 8.2R12.1 Pulse Secure Pulse Connect Secure (PCS) versions 8.3 through 8.3R7.1 Pulse Secure Pulse Connect Secure (PCS) versions 9.0 through 9.0R3.4

Description The issue is related to errors in permission handling, allowing an unauthenticated remote attacker to send a specially crafted URI and perform an arbitrary file reading. This can lead to the disclosure of active users and their plain-text credentials. Over 2,500 Pulse Secure VPN endpoints are potentially affected.

Recommendations For Pulse Secure Pulse Connect Secure (PCS) versions 8.2 through 8.2R12.1, update to version 8.2R12.1 or later. For Pulse Secure Pulse Connect Secure (PCS) versions 8.3 through 8.3R7.1, update to version 8.3R7.1 or later. For Pulse Secure Pulse Connect Secure (PCS) versions 9.0 through 9.0R3.4, update to version 9.0R3.4 or later. As a temporary workaround, consider restricting access to the vulnerable URI endpoint until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

CWE-275

Related Identifiers

BDU:2019-02980

CVE-2019-11510

Affected Products

Pulse Connect Secure

References · 69

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/pulse_secure_file_disclosure.rb · Exploit
• 🔥 https://github.com/projectzeroindia/CVE-2019-11510 · Exploit
• 🔥 https://github.com/BishopFox/pwn-pulse · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-11510-1 · Exploit
• 🔥 https://github.com/imjdl/CVE-2019-11510-poc · Exploit
• 🔥 https://github.com/cisagov/check-your-pulse · Exploit
• 🔥 https://github.com/r00tpgp/http-pulse_ssl_vpn.nse · Exploit
• 🔥 https://github.com/aqhmal/pulsexploit · Exploit
• 🔥 https://github.com/es0/CVE-2019-11510_poc · Exploit
• 🔥 https://github.com/34zY/APT-Backpack · Exploit
• 🔥 http://packetstormsecurity.com/files/154176/Pulse-Secure-SSL-VPN-8.1R15.1-8.2-8.3-9.0-Arbitrary-File-Disclosure.html · Exploit
• 🔥 https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study · Exploit
• 🔥 https://exploit-db.com/exploits/47297 · Exploit
• https://bdu.fstec.ru/vul/2019-02980 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11510 · Vendor Advisory