Pulse Connect Secure CVE-2018-20811 Information Disclosure Vulnerability

Bugtraq ID:	109376
Class:	Design Error
CVE:	CVE-2018-20811
Remote:	Yes
Local:	No
Published:	Jun 28 2019 12:00AM
Updated:	Jun 28 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Pulse Secure Pulse Connect Secure 8.3R1 Pulse Secure Pulse Connect Secure 8.1R7 Pulse Secure Pulse Connect Secure 8.1R6 Pulse Secure Pulse Connect Secure 8.1R5 Pulse Secure Pulse Connect Secure 8.1R4 Pulse Secure Pulse Connect Secure 8.1R3 Pulse Secure Pulse Connect Secure 8.1R2 Pulse Secure Pulse Connect Secure 8.1R10 Pulse Secure Pulse Connect Secure 8.1R1 Pulse Secure Pulse Connect Secure 8.1R0
Not Vulnerable:	Pulse Secure Pulse Connect Secure 8.3R2 Pulse Secure Pulse Connect Secure 8.1R12

Pulse Connect Secure CVE-2018-20811 Information Disclosure Vulnerability

Pulse Connect Secure is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

Pulse Connect Secure version 8.3RX prior to 8.3R2 and 8.1RX prior to 8.1R12 are vulnerable.

Pulse Connect Secure CVE-2018-20811 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Pulse Connect Secure CVE-2018-20811 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Pulse Connect Secure CVE-2018-20811 Information Disclosure Vulnerability

References:

• Vendor Homepage (Pulse Secure)
  
• SA43877 - 2018-08 Security Bulletin: Multiple vulnerabilities resolved in Pulse (Pulse Secure)