HIGH
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.2RX before 8.2R12.1, users using SAML authentication with the Reuse Existing NC (Pulse) Session option may see authentication leaks
Published Apr 26, 2019
7.5
HIGHCVSS 3.1
EPSS 3.99%
Description
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.2RX before 8.2R12.1, users using SAML authentication with the Reuse Existing NC (Pulse) Session option may see authentication leaks.
Affected products
No data.
OR
- 8.2
- 8.3
- 8.2r1.0
- 8.2r1.1
- 8.2r2.0
- 8.2r3.0
- 8.2r3.1
- 8.2r4.0
- 8.2r4.1
- 8.2r5.0
- 8.2r5.1
- 8.2r6.0
- 8.2r7.0
- 8.2r7.1
- 8.2rx
- 8.3rx
- 9.0r1
- 9.0r2
- 9.0r2.1
- 9.0r3
- 9.0r3.1
- 9.0r3.2
- 9.0rx
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (3)
- http://www.securityfocus.com/bid/108073 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 x_refsource_CONFIRMVendor Advisoryx_refsource_MISC
- https://www.kb.cert.org/vuls/id/927237 third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
| Link | Providers | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/108073 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 | x_refsource_CONFIRMVendor Advisoryx_refsource_MISC | |
| https://www.kb.cert.org/vuls/id/927237 | third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 26, 2019
Updated Aug 4, 2024
Reserved Apr 25, 2019
Link CVE-2019-11541
CISA Vulnrichment
Updated n/a