Pulse Connect Secure and Pulse Policy Secure Multiple Security Vulnerabilities
BID:108073
CVE-2019-11507 | CVE-2019-11508 | CVE-2019-11510 | CVE-2019-11538 | CVE-2019-11539 | CVE-2019-11540 | CVE-2019-11541 | CVE-2019-11542 | CVE-2019-11543 |Info
Pulse Connect Secure and Pulse Policy Secure Multiple Security Vulnerabilities
| Bugtraq ID: | 108073 |
| Class: | Unknown |
| CVE: |
CVE-2019-11510 CVE-2019-11508 CVE-2019-11540 CVE-2019-11543 CVE-2019-11541 CVE-2019-11542 CVE-2019-11539 CVE-2019-11538 CVE-2019-11509 CVE-2019-11507 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 24 2019 12:00AM |
| Updated: | Apr 24 2019 12:00AM |
| Credit: | Orange Tsai and Meh Chang from DEVCORE research team and Jake Valletta from FireEye. |
| Vulnerable: |
Pulse Secure Pulse Policy Secure 9.0R2 Pulse Secure Pulse Policy Secure 9.0R1 Pulse Secure Pulse Policy Secure 5.4R1 Pulse Secure Pulse Policy Secure 5.3R6 Pulse Secure Pulse Policy Secure 5.3R5 Pulse Secure Pulse Policy Secure 5.3R2 Pulse Secure Pulse Policy Secure 5.3R1 Pulse Secure Pulse Policy Secure 5.3R0 Pulse Secure Pulse Policy Secure 5.2R9 Pulse Secure Pulse Policy Secure 5.2R8 Pulse Secure Pulse Policy Secure 5.2R6 Pulse Secure Pulse Policy Secure 5.2R5 Pulse Secure Pulse Policy Secure 5.2R1 Pulse Secure Pulse Policy Secure 5.2R0 Pulse Secure Pulse Policy Secure 5.1R8 Pulse Secure Pulse Policy Secure 5.1R7 Pulse Secure Pulse Policy Secure 5.1R12 Pulse Secure Pulse Policy Secure 5.1R10 Pulse Secure Pulse Policy Secure 5.1R1 Pulse Secure Pulse Policy Secure 5.1R0 Pulse Secure Pulse Connect Secure 9.0R3 Pulse Secure Pulse Connect Secure 9.0R2 Pulse Secure Pulse Connect Secure 9.0R1 Pulse Secure Pulse Connect Secure 8.3R7 Pulse Secure Pulse Connect Secure 8.3R6 Pulse Secure Pulse Connect Secure 8.3R5 Pulse Secure Pulse Connect Secure 8.3R4 Pulse Secure Pulse Connect Secure 8.3R1 Pulse Secure Pulse Connect Secure 8.2R6 Pulse Secure Pulse Connect Secure 8.2R5 Pulse Secure Pulse Connect Secure 8.2R11 Pulse Secure Pulse Connect Secure 8.2R10 Pulse Secure Pulse Connect Secure 8.2R1.1 Pulse Secure Pulse Connect Secure 8.2R1 Pulse Secure Pulse Connect Secure 8.2R0 Pulse Secure Pulse Connect Secure 8.1R7 Pulse Secure Pulse Connect Secure 8.1R6 Pulse Secure Pulse Connect Secure 8.1R5 Pulse Secure Pulse Connect Secure 8.1R4 Pulse Secure Pulse Connect Secure 8.1R3 Pulse Secure Pulse Connect Secure 8.1R2 Pulse Secure Pulse Connect Secure 8.1R14 Pulse Secure Pulse Connect Secure 8.1R13 Pulse Secure Pulse Connect Secure 8.1R12 Pulse Secure Pulse Connect Secure 8.1R10 Pulse Secure Pulse Connect Secure 8.1R1 Pulse Secure Pulse Connect Secure 8.1R0 |
| Not Vulnerable: |
Pulse Secure Pulse Policy Secure 9.0R4 Pulse Secure Pulse Policy Secure 9.0R3.2 Pulse Secure Pulse Policy Secure 5.4R7.1 Pulse Secure Pulse Policy Secure 5.3R12.1 Pulse Secure Pulse Policy Secure 5.2R12.1 Pulse Secure Pulse Policy Secure 5.1R15.1 Pulse Secure Pulse Connect Secure 9.0R4 Pulse Secure Pulse Connect Secure 9.0R3.4 Pulse Secure Pulse Connect Secure 8.3R7.1 Pulse Secure Pulse Connect Secure 8.2R12.1 Pulse Secure Pulse Connect Secure 8.1R15.1 |
Discussion
Pulse Connect Secure and Pulse Policy Secure Multiple Security Vulnerabilities
Pulse Connect Secure and Pulse Policy Secure are prone to the following vulnerabilities:
1. An arbitrary file read vulnerability
2. An arbitrary file-write vulnerability
3. A session-hijacking vulnerability
4. Multiple cross-site scripting vulnerabilities
5. Multiple information disclosure vulnerabilities
6. A stack-based buffer-overflow vulnerability
7. A command-injection vulnerability
8. An arbitrary code-execution vulnerability
An attacker can exploit these issues to access arbitrary files in the context of the application, write arbitrary files, hijack an arbitrary session and gain unauthorized access, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, obtain sensitive information, inject and execute arbitrary commands and execute arbitrary code in the context of the application.
Pulse Connect Secure and Pulse Policy Secure are prone to the following vulnerabilities:
1. An arbitrary file read vulnerability
2. An arbitrary file-write vulnerability
3. A session-hijacking vulnerability
4. Multiple cross-site scripting vulnerabilities
5. Multiple information disclosure vulnerabilities
6. A stack-based buffer-overflow vulnerability
7. A command-injection vulnerability
8. An arbitrary code-execution vulnerability
An attacker can exploit these issues to access arbitrary files in the context of the application, write arbitrary files, hijack an arbitrary session and gain unauthorized access, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, obtain sensitive information, inject and execute arbitrary commands and execute arbitrary code in the context of the application.
Exploit / POC
Pulse Connect Secure and Pulse Policy Secure Multiple Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Pulse Connect Secure and Pulse Policy Secure Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Pulse Connect Secure and Pulse Policy Secure Multiple Security Vulnerabilities
References:
References:
- Pulse Secure - Homepage (Pulse Secure)
- SA44101 - 2019-04: Out-of-Cycle Advisory: Multiple vulnerabilities resolved in P (Pulse Secure)