جزئیات آسیب‌پذیری

خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.

In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .

• https://kb.pulsesecure.net/?atype=sa x_refsource_MISC
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/ x_refsource_CONFIRM
• http://www.securityfocus.com/bid/108073 vdb-entryx_refsource_BID
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010 x_refsource_CONFIRM
• http://packetstormsecurity.com/files/154176/Pulse-Secure-SSL-VPN-8.1R15.1-8.2-8.3-9.0-Arbitrary-File-Disclosure.html x_refsource_MISC
• https://badpackets.net/over-14500-pulse-secure-vpn-endpoints-vulnerable-to-cve-2019-11510/ x_refsource_MISC
• http://packetstormsecurity.com/files/154231/Pulse-Secure-SSL-VPN-File-Disclosure-NSE.html x_refsource_MISC
• https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf x_refsource_MISC
• https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/ x_refsource_MISC
• https://lists.apache.org/thread.html/ff5fa1837b6bd1b24d18a42faa75e165a4573dbe2d434910c15fd08a%40%3Cuser.guacamole.apache.org%3E mailing-listx_refsource_MLIST
• https://www.kb.cert.org/vuls/id/927237 third-party-advisoryx_refsource_CERT-VN
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11510 government-resource