CVE-2018-14366 - Vulnerability Details

Vendors	Products
Ivanti	Connect Secure
Pulsesecure	Pulse Connect Secure Pulse Policy Secure

Link	Providers
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2018-09-04T00:00:00", "descriptions": [{"lang": "en", "value": "download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-09-06T22:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2018-14366", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877", "refsource": "CONFIRM", "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T09:29:50.097Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2018-14366", "datePublished": "2018-09-06T23:00:00", "dateReserved": "2018-07-17T00:00:00", "dateUpdated": "2024-08-05T09:29:50.097Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2018-09-04T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-09-06T22:57:01 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

ID : CVE-2018-14366 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877 (string)

refsource : CONFIRM (string)

url : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T09:29:50.097Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2018-14366 (string)

datePublished : 2018-09-06T23:00:00 (string)

dateReserved : 2018-07-17T00:00:00 (string)

dateUpdated : 2024-08-05T09:29:50.097Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "202E4839-7CE4-49CE-BEE1-CB33A96770E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:*:*:*:*:*:*:*", "matchCriteriaId": "AB453513-AFEA-4E68-8441-3984E83FFB2F", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r1.0:*:*:*:*:*:*:*", "matchCriteriaId": "E2037BE1-408C-47E8-8A70-8440BF3A1ED6", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1rx:*:*:*:*:*:*:*", "matchCriteriaId": "8135B806-EE52-412B-8EE1-6F20666055CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3rx:*:*:*:*:*:*:*", "matchCriteriaId": "DD77C208-DD3E-46BD-930F-93BB39799D08", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r1.0:*:*:*:*:*:*:*", "matchCriteriaId": "6A42EFC8-C5FF-4397-87CF-263813FAA5D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r2.0:*:*:*:*:*:*:*", "matchCriteriaId": "C952B5B8-DCAB-476A-9E60-3F1BBE509F21", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.0:*:*:*:*:*:*:*", "matchCriteriaId": "7F199F01-9EEA-4184-AD99-6B21110484AB", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.2:*:*:*:*:*:*:*", "matchCriteriaId": "9938EBCC-B9B7-4FB1-9ACB-9BED485AB5E2", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r4.0:*:*:*:*:*:*:*", "matchCriteriaId": "9B4A309B-ACB0-4053-909A-6889129EB2C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r5.0:*:*:*:*:*:*:*", "matchCriteriaId": "D8A4A105-EBF3-4895-9ABE-50972DD232F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r6.0:*:*:*:*:*:*:*", "matchCriteriaId": "4013CA1C-48F0-46F6-B327-E6B34311A7EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.0:*:*:*:*:*:*:*", "matchCriteriaId": "112B9736-336D-4C72-A960-0B33DD3439EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.1:*:*:*:*:*:*:*", "matchCriteriaId": "49FA8DC5-900B-4A53-AF55-410A7FF901E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r8.0:*:*:*:*:*:*:*", "matchCriteriaId": "A4946BBE-E449-4F89-910C-3389BDF36071", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.0:*:*:*:*:*:*:*", "matchCriteriaId": "1FDBD7BC-C9A7-48C2-B3BC-8E2C90F54268", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.1:*:*:*:*:*:*:*", "matchCriteriaId": "C4B56D6E-2429-4511-8FE6-A9BE1226F031", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2rx:*:*:*:*:*:*:*", "matchCriteriaId": "C766CBF4-502C-4522-845C-A5436DD1960D", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r1:*:*:*:*:*:*:*", "matchCriteriaId": "C7F2FFEC-F243-4D85-888E-339C60B3C0CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2:*:*:*:*:*:*:*", "matchCriteriaId": "6A841849-DA0E-4BAA-8807-F42481C9457D", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2.1:*:*:*:*:*:*:*", "matchCriteriaId": "2EC5A497-1FA2-4AE4-A611-553129B9F78C", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r3:*:*:*:*:*:*:*", "matchCriteriaId": "479B25A4-59AA-4FA4-B1CC-E06781D00962", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4rx:*:*:*:*:*:*:*", "matchCriteriaId": "07A6F2EF-09AF-4DAA-A552-6111C51DD210", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability."}, {"lang": "es", "value": "download.cgi en Pulse Secure Pulse Connect Secure, en versiones 8.1RX anteriores a la 8.1R13 y versiones 8.3RX anteriores a la 8.3R4; y Pulse Policy Secure hasta versiones 5.2RX anteriores a la 5.2R10 y versiones 5.4RX anteriores a la 5.4R4 tienen una vulnerabilidad de redirecci\u00f3n abierta."}], "id": "CVE-2018-14366", "lastModified": "2024-11-21T03:48:55.847", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-09-06T23:29:00.367", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-601"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:8.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 202E4839-7CE4-49CE-BEE1-CB33A96770E7 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:8.3:*:*:*:*:*:*:* (string)

matchCriteriaId : AB453513-AFEA-4E68-8441-3984E83FFB2F (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : E2037BE1-408C-47E8-8A70-8440BF3A1ED6 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1rx:*:*:*:*:*:*:* (string)

matchCriteriaId : 8135B806-EE52-412B-8EE1-6F20666055CB (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3rx:*:*:*:*:*:*:* (string)

matchCriteriaId : DD77C208-DD3E-46BD-930F-93BB39799D08 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 6A42EFC8-C5FF-4397-87CF-263813FAA5D7 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : C952B5B8-DCAB-476A-9E60-3F1BBE509F21 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 7F199F01-9EEA-4184-AD99-6B21110484AB (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 9938EBCC-B9B7-4FB1-9ACB-9BED485AB5E2 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 9B4A309B-ACB0-4053-909A-6889129EB2C1 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : D8A4A105-EBF3-4895-9ABE-50972DD232F8 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r6.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 4013CA1C-48F0-46F6-B327-E6B34311A7EA (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 112B9736-336D-4C72-A960-0B33DD3439EF (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 49FA8DC5-900B-4A53-AF55-410A7FF901E9 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r8.0:*:*:*:*:*:*:* (string)

matchCriteriaId : A4946BBE-E449-4F89-910C-3389BDF36071 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 1FDBD7BC-C9A7-48C2-B3BC-8E2C90F54268 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.1:*:*:*:*:*:*:* (string)

matchCriteriaId : C4B56D6E-2429-4511-8FE6-A9BE1226F031 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2rx:*:*:*:*:*:*:* (string)

matchCriteriaId : C766CBF4-502C-4522-845C-A5436DD1960D (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r1:*:*:*:*:*:*:* (string)

matchCriteriaId : C7F2FFEC-F243-4D85-888E-339C60B3C0CE (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2:*:*:*:*:*:*:* (string)

matchCriteriaId : 6A841849-DA0E-4BAA-8807-F42481C9457D (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 2EC5A497-1FA2-4AE4-A611-553129B9F78C (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r3:*:*:*:*:*:*:* (string)

matchCriteriaId : 479B25A4-59AA-4FA4-B1CC-E06781D00962 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4rx:*:*:*:*:*:*:* (string)

matchCriteriaId : 07A6F2EF-09AF-4DAA-A552-6111C51DD210 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability. (string)

}

1 : { »

lang : es (string)

value : download.cgi en Pulse Secure Pulse Connect Secure, en versiones 8.1RX anteriores a la 8.1R13 y versiones 8.3RX anteriores a la 8.3R4; y Pulse Policy Secure hasta versiones 5.2RX anteriores a la 5.2R10 y versiones 5.4RX anteriores a la 5.4R4 tienen una vulnerabilidad de redirección abierta. (string)

}

]

id : CVE-2018-14366 (string)

lastModified : 2024-11-21T03:48:55.847 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5.8 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:N/C:P/I:P/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 4.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : true (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 2.7 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2018-09-06T23:29:00.367 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-601 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object