Reset Search
 

 

Article

JSA10487 - 2011-09 Security Bulletin: Pulse Connect Secure (PCS) & Pulse Policy Secure (PPS): OpenLDAP Issue

« Go Back

Information

 
Product AffectedPCS500, PCS700, PCS2000, PCS2500, PCS4000, PCS4500, PCS6000, PCS6500, PCS4000 FIPS, PCS6000 FIPS, PCS4500 FIPS, v6500 FIPS, MAG PCS2600, MAG PCS4610, MAG PCS160, MAG PCS360
<BR>
PPS: IC4000, IC4500, IC6000, IC6500, IC6500 FIPS, MAG2600, MAG4610, MAG-SM160, MA
Problem
LDAPS based authentication and authorization require additional validation.
Solution
The following software releases have a fix for this issue:
PCS: 7.1R1 or higher.
PPS: 4.1R1 or higher.
We recommend upgrading your software to resolve this security vulnerability.


 
Workaround
None.
Implementation
Related Links
To access the most up-to-date software, please go to http://my.pulsesecure.net
 
CVSS Score7.5 (AV:N/AC:L/Au:S/C:C/I:P/A:N)
Risk AssessmentThis vulnerability may allow an attacker to gain access to information.
Acknowledgements
Alert TypePSN - Product Support Notification
Risk LevelMedium
Attachment 1 
Attachment 2 
Legacy IDPSN-2011-08-340, JSA10487

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255