Pulse Connect Secure and Policy Secure CVE-2019-11509 Access Bypass Vulnerability
BID:108558
Info
Pulse Connect Secure and Policy Secure CVE-2019-11509 Access Bypass Vulnerability
| Bugtraq ID: | 108558 |
| Class: | Access Validation Error |
| CVE: |
CVE-2019-11509 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 25 2019 12:00AM |
| Updated: | Apr 25 2019 12:00AM |
| Credit: | Orange Tsai and Meh Chang from DEVCORE research team, and Jake Valletta from FireEye |
| Vulnerable: |
Pulse Secure Pulse Policy Secure 9.0Rx Pulse Secure Pulse Policy Secure 5.4RX Pulse Secure Pulse Policy Secure 5.3RX Pulse Secure Pulse Policy Secure 5.2RX Pulse Secure Pulse Policy Secure 5.1RX Pulse Secure Pulse Connect Secure 9.0Rx Pulse Secure Pulse Connect Secure 8.3RX Pulse Secure Pulse Connect Secure 8.2RX Pulse Secure Pulse Connect Secure 8.1RX |
| Not Vulnerable: | |
Discussion
Pulse Connect Secure and Policy Secure CVE-2019-11509 Access Bypass Vulnerability
Pulse Connect Secure and Policy Secure are prone to an access-bypass vulnerability.
An attacker can exploit this execute arbitrary code and perform unauthorized actions; this may aid in launching further attacks.
The following products are vulnerable:
Pulse Connect Secure 9.0RX, 8.3RX, 8.2RX, 8.1RX
Pulse Policy Secure 9.0RX, 5.4RX, 5.3RX, 5.2RX, 5.1RX
Pulse Connect Secure and Policy Secure are prone to an access-bypass vulnerability.
An attacker can exploit this execute arbitrary code and perform unauthorized actions; this may aid in launching further attacks.
The following products are vulnerable:
Pulse Connect Secure 9.0RX, 8.3RX, 8.2RX, 8.1RX
Pulse Policy Secure 9.0RX, 5.4RX, 5.3RX, 5.2RX, 5.1RX
Exploit / POC
Pulse Connect Secure and Policy Secure CVE-2019-11509 Access Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].