CVEvulnerability
CVE-2016-4787
10.0 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-05-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 10.0 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
Description
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.
Affected configurations
• ivanti connect secure 8.0
• ivanti connect secure 8.2
• pulsesecure pulse connect secure 7.4
• ivanti connect secure 8.1
• pulsesecure pulse connect secure 8.1r1.0
References
- http://www.securitytracker.com/id/1035932 www.securitytracker.com
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40207 Vendor Advisory
- http://www.securitytracker.com/id/1035932 www.securitytracker.com
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40207 Vendor Advisory