CVE-2016-4787 Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directo...
CriticalCVSS 10.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Ivanti Connect Secure | = 8.0 | No fix listed |
| Ivanti Connect Secure | = 8.2 | No fix listed |
| Ivanti Connect Secure | = 8.1 | No fix listed |
| pulsesecure pulse connect secure | = 7.4 | No fix listed |
| pulsesecure pulse connect secure | = 8.1r1.0 | No fix listed |
References
- 1035932 vdb-entry
- kb.pulsesecure.net vendor-advisory