| Package | Affected versions | Patched versions |
|---|---|---|
| connect secure | = 8.1= 8.2= 8.3= 9.0 | |
| policy secure | = 9.0 | |
| pulse policy secure | = 5.2= 5.4 |
In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse Policy Secure (PPS) before 5.1R15.1, 5.2 before 5.2R12.1, 5.3 before 5.3R15.1, 5.4 before 5.4R7.1, and 9.0 before 9.0R3.2, an authenticated attacker (via the admin web interface) can exploit Incorrect Access Control to execute arbitrary code on the appliance.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free