Reset Search
 

 
Article

SA40212 - [Pulse Secure] Sign in page disclosure issue (CVE-2016-4792)

Printable View
« Go Back

Information

 
Product AffectedPulse Connect Secure
Problem
An issue was found on the Pulse Connect Secure device that could allow disclosure of sign in pages. The security of the pages is not affected by this issue. This issue was assigned: CVE-2016-4792.
Solution
This issue is resolved as part of a new feature and is first available in PCS 8.2r1.  

Software downloads can be located on our support site: https://my.pulsesecure.net
Workaround
There are no work arounds for this issue. The only way to resolve the issue is to upgrade to a fixed release of software. 
Implementation
Related Links
CVSS Score5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Risk Assessment
Acknowledgements
This vulnerability was discovered and responsibly reported to Pulse Secure by Jake Reynolds from Depth Security.
Alert TypeSA - Security Advisory
Risk LevelMedium
Attachment 1 
Attachment 2 
Legacy ID

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255