| Package | Affected versions | Patched versions |
|---|---|---|
| virtual traffic manager | = 18.2= 19.2= 19.3= 20.1= 20.2= 20.3≥ 18.3, ≤ 19.1≤ 18.1 |
An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to smuggle an HTTP request through an HTTP/2 Header. This vulnerability is resolved in 21.1, 20.3R1, 20.2R1, 20.1R2, 19.2R4, and 18.2R3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free