PT-2019-12364 · Pulse · Pulse Connect Secure

CVE-2019-11541

·

Publicado

2019-04-26

·

Atualizado

2024-02-27

CVSS v3.1

8.3

Alta

VetorAC:L/AV:N/A:L/C:L/I:L/PR:N/S:C/UI:N
Name of the Vulnerable Software and Affected Versions Pulse Connect Secure versions 9.0RX before 9.0R3.4 Pulse Connect Secure versions 8.3RX before 8.3R7.1 Pulse Connect Secure versions 8.2RX before 8.2R12.1
Description The issue affects users of SAML authentication with the Reuse Existing NC (Pulse) Session option, potentially leading to authentication leaks.
Recommendations For Pulse Connect Secure version 9.0RX before 9.0R3.4, update to version 9.0R3.4 or later. For Pulse Connect Secure version 8.3RX before 8.3R7.1, update to version 8.3R7.1 or later. For Pulse Connect Secure version 8.2RX before 8.2R12.1, update to version 8.2R12.1 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2019-11541

Produtos afetados

Pulse Connect Secure