A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.
References
| Link | Resource |
|---|---|
| https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/ | Vendor Advisory |
| https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/ - Vendor Advisory |
27 Feb 2024, 21:04
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3:r2.1:*:*:*:*:*:* cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3:r2:*:*:*:*:*:* cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3:r3:*:*:*:*:*:* cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3:r4:*:*:*:*:*:* |
cpe:2.3:a:ivanti:connect_secure:8.3:r3:*:*:*:*:*:* cpe:2.3:a:ivanti:connect_secure:8.3:r4:*:*:*:*:*:* cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:* cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:* cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:* |
| First Time |
Ivanti connect Secure
Ivanti |
Information
Published : 2019-06-28 18:15
Updated : 2024-11-21 04:02
NVD link : CVE-2018-20809
Mitre link : CVE-2018-20809
CVE.ORG link : CVE-2018-20809
JSON object : View
Products Affected
pulsesecure
- pulse_policy_secure
ivanti
- connect_secure
CWE
CWE-20
Improper Input Validation