Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| connect secure | = 9.0= 9.1 | |
| pulse connect secure | ≤ 9.1 |
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free