CVE-2019-11508
high · 7.2In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the admin web interface) can exploit Directory Traversal to execute arbitrary code on the appliance.
7.2
CVSS
14.7%
EPSS (exploit prob.)
97th
EPSS percentile
2019-05-08
Published
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.1 |
| ivanti | connect_secure | 7.4 |
| ivanti | connect_secure | 7.4 |
| ivanti | connect_secure | 7.4 |
| ivanti | connect_secure | 7.4 |
| ivanti | connect_secure | 7.4 |
| ivanti | connect_secure | 7.4 |
| ivanti | connect_secure | 7.4 |
| ivanti | connect_secure | 7.4 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/108073
- https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/
- https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf
- https://kb.pulsesecure.net/?atype=sa
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010
- https://www.kb.cert.org/vuls/id/927237
- http://www.securityfocus.com/bid/108073
- https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/
- https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf
- https://kb.pulsesecure.net/?atype=sa
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010
- https://www.kb.cert.org/vuls/id/927237
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-11508