A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.
References
Link | Resource |
---|---|
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
27 Feb 2024, 21:04
Type | Values Removed | Values Added |
---|---|---|
First Time |
Ivanti connect Secure
Ivanti |
|
CPE | cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3:r2.1:*:*:*:*:*:* cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3:r2:*:*:*:*:*:* cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3:r3:*:*:*:*:*:* cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3:r4:*:*:*:*:*:* |
cpe:2.3:a:ivanti:connect_secure:8.3:r3:*:*:*:*:*:* cpe:2.3:a:ivanti:connect_secure:8.3:r4:*:*:*:*:*:* cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:* cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:* cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:* |
Information
Published : 2019-06-28 18:15
Updated : 2024-02-28 17:08
NVD link : CVE-2018-20809
Mitre link : CVE-2018-20809
CVE.ORG link : CVE-2018-20809
JSON object : View
Products Affected
pulsesecure
- pulse_policy_secure
ivanti
- connect_secure
CWE
CWE-20
Improper Input Validation