A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device in a load-balanced configuration to perform a buffer overflow via a malicious crafted web request.
2021-08-16T19:15:13.447
2024-11-21T05:50:58.073
Modified
CVSSv3.1: 7.2 (HIGH)
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.0
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | ivanti | connect_secure | 9.1 | Yes |
Application | ivanti | connect_secure | 9.1 | Yes |
Application | ivanti | connect_secure | 9.1 | Yes |
Application | ivanti | connect_secure | 9.1 | Yes |
Application | ivanti | connect_secure | 9.1 | Yes |
Application | ivanti | connect_secure | 9.1 | Yes |
Application | ivanti | connect_secure | 9.1 | Yes |
Application | ivanti | connect_secure | 9.1 | Yes |
Application | ivanti | connect_secure | 9.1 | Yes |
Application | ivanti | connect_secure | 9.1 | Yes |
Application | ivanti | connect_secure | 9.1 | Yes |
Application | ivanti | connect_secure | 9.1 | Yes |
Application | pulsesecure | pulse_connect_secure | < 9.1 | Yes |