Pulse Connect Secure Code Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 07/03/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| connect secure | = 9.1≤ 9.0 | |
| policy secure | = 9.1 | |
| pulse policy secure | ≤ 9.0 |
A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free