ZeroHour

CVE-2019-11540

PoC ×2
CVSS 3.1
9.8 critical
EPSS
8%p95
Published
()
Modified
Description

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5.4RX before 5.4R7.1, an unauthenticated, remote attacker can conduct a session hijacking attack.

Vendors
ivantipulsesecure
Products
connect secure, pulse connect secure, pulse policy secure
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.