CVE-2018-6374 The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipul...
MediumCVSS 6.5
EPSS 0.62%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pulsesecure desktop linux client | < 5.2r9.2 | 5.2r9.2 |
| pulsesecure desktop linux client | < 5.3r4.2 | 5.3r4.2 |
References
- kb.pulsesecure.net vendor-advisory
- 102908 third-party-advisory vdb-entry