CVE-2018-20811

Опубликовано: 28 июн. 2019

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

A hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2 and 8.1RX before 8.1R12.

Ссылки

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/
Vendor Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ivanti:connect_secure:8.1:r1.0:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r1.1:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r10.0:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r11.0:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r11.1:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r2.0:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r2.1:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r3.1:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r3.2:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r4.0:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r4.1:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r5.0:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r6.0:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r7.0:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r8.0:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r9.0:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r9.1:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.1:r9.2:*:*:*:*:*:*

cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00714

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-c798-qcm4-fvhx