Advisorycritical

CISA warns that Pulse Secure VPN issue CVE-2019

Security Affairsby @securityaffairsJan 11, 2020 · 06:57 UTC (Jan 11, 2020)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2019-11510 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-11510 CVE-2019-11539 CVE-2018-13379

Tags: cve-2019-11510 cve-2019-11539 cve-2018-13379 advisory

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2019-11510	Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN	10.0	100%	KEVRansomwarePoC ×2	May 8, 2019 KEV Nov 3, 2021
CVE-2019-11539	Authenticated Command Injection in Ivanti Pulse Connect Secure and Policy Secure	7.2	99%	KEVRansomwarePoC ×2	Apr 26, 2019 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

The US DHS CISA agency is warning organizations that threat actors continue to exploit the CVE-2019-11510 Pulse Secure VPN vulnerability. The U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.