Reset Search
 

 

Article

SA44440 - April 21 2020 OpenSSL Security Advisory

« Go Back

Information

 
Product Affected
Problem
On April 21 2020, the OpenSSL project announced a new security advisory. These issues may affect Pulse Secure product.

Refer to KB43892 - What releases will Pulse Secure apply fixes to resolve security vulnerabilities? per our End of Engineering (EOE) and End of Life (EOL) policies.

The OpenSSL advisory can be found at the following link: https://www.openssl.org/news/secadv/20200421.txt
Solution

All Pulse Secure products were evaluated and found not vulnerable to the following CVE:

  • Segmentation fault in SSL_check_chain (CVE-2020-1967)
The table below provides details of the affected and not affected products:
    Pulse Connect SecureNot Vulnerable
    Pulse Policy SecureNot Vulnerable
    Pulse OneNot Vulnerable
    All versions of Pulse Desktop ClientNot Vulnerable
    Pulse Mobile Client (Android & iOS)Not Vulnerable
    Pulse Secure vADCNot Vulnerable


    LEGAL DISCLAIMER

    • THIS ADVISORY IS PROVIDED ON AN “AS IS” BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.  USE OF THIS INFORMATION FOUND IN THIS ADVISORY OR IN MATERIALS LINKED HEREFROM IS AT THE USER’S OWN RISK.  PULSE SECURE RESERVES THE RIGHT TO CHANGE OR UPDATE THIS ADVISORY AT ANY TIME.
    • A STANDALONE COPY OR PARAPHRASE OF THE TEXT OF THIS ADVISORY THAT OMITS THE DISTRIBUTION URL IS AN UNCONTROLLED COPY AND MAY OMIT IMPORTANT INFORMATION OR CONTAIN ERRORS.  THE INFORMATION IN THIS ADVISORY IS INTENDED FOR END USERS OF PULSE SECURE PRODUCTS.
    Document History:
    April 22, 2020 - Initial advisory posted.
    April 23, 2020 - Updated Details for Pulse Secure vADC Product.
    Workaround
    Implementation
    Related Links
    CVSS Score7.5 High CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    Risk Assessment
    Acknowledgements
    Alert Type 
    Risk Level 
    Attachment 1 
    Attachment 2 
    Legacy ID

    Feedback

     

    Was this article helpful?


       

    Feedback

    Please tell us how we can make this article more useful.

    Characters Remaining: 255