CVE-2018-20307 Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission val...
MediumCVSS 4.3
EPSS 0.83%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pulsesecure virtual traffic manager | = 9.9 | No fix listed |
| pulsesecure virtual traffic manager | = 9.9-r1 | No fix listed |
| pulsesecure virtual traffic manager | = 10.4 | No fix listed |
| pulsesecure virtual traffic manager | = 17.2 | No fix listed |
References
- kb.pulsesecure.net vendor-advisory