CVE-2019-11508

In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the admin web interface) can exploit Directory Traversal to execute arbitrary code on the appliance.

CVSS v3.1 NVD

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0 MITRE

8.6 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CVSS v2.0 NVD

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

14.69% chance of exploitation in the next 30 days, 97th percentile

Published

2019-05-08

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn…

Security advisories

• https://kb.pulsesecure.net/?atype=sa
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101
• http://www.securityfocus.com/bid/108073
• https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn…
• https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-N…
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010
• https://www.kb.cert.org/vuls/id/927237

References

• CVE Record
• NVD entry