CVE-2019-11507

概要

参考情報

• securityfocus.com/bid/108073 · Broken Link
• devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study · Exploit
• i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf · Exploit
• kb.pulsesecure.net · Third Party Advisory
• kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 · Patch
• kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516 · Third Party Advisory
• kb.cert.org/vuls/id/927237 · Third Party Advisory

connect secure のその他の脆弱性

• CVE-2026-118527中 4.3悪用確認済み（CISA KEV）Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload…
• CVE-2026-111357高 7.0悪用確認済み（CISA KEV）Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege e…
• CVE-2026-104935高 8.6悪用確認済み（CISA KEV）Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. Thi…
• CVE-2025-8712中 5.4Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 22…
• CVE-2025-8711中 5.4CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Iva…