Reset Search
 

 

Article

SA44676 - December 08 2020 OpenSSL Security Advisory

« Go Back

Information

 
Product Affected
Problem
On December 08 2020, the OpenSSL project announced a new security advisory. These issues may affect Pulse Secure product.

Refer to KB43892 - What releases will Pulse Secure apply fixes to resolve security vulnerabilities? per our End of Engineering (EOE) and End of Life (EOL) policies.

The OpenSSL advisory can be found at the following link: https://www.openssl.org/news/secadv/20201208.txt
Solution
Pulse Secure is currently evaluating the following issues reported by OpenSSL:

As the investigation continues, we recommend subscribing to this advisory as it will be periodically updated to reflect the current status.

EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
4.3 Medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
 
Pulse Connect SecureUnder Review
Pulse Policy SecureUnder Review
Pulse OneResolved in Pulse One 2.0.2004
Pulse Secure vADCNot Vulnerable


Engineering Team is reviewing details for Pulse Connect Secure / Pulse Policy Secure. We will update the advisory accordingly.

LEGAL DISCLAIMER

  • THIS ADVISORY IS PROVIDED ON AN “AS IS” BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.  USE OF THIS INFORMATION FOUND IN THIS ADVISORY OR IN MATERIALS LINKED HEREFROM IS AT THE USER’S OWN RISK.  PULSE SECURE RESERVES THE RIGHT TO CHANGE OR UPDATE THIS ADVISORY AT ANY TIME.
  • A STANDALONE COPY OR PARAPHRASE OF THE TEXT OF THIS ADVISORY THAT OMITS THE DISTRIBUTION URL IS AN UNCONTROLLED COPY AND MAY OMIT IMPORTANT INFORMATION OR CONTAIN ERRORS.  THE INFORMATION IN THIS ADVISORY IS INTENDED FOR END USERS OF PULSE SECURE PRODUCTS.
Document History:
January 18, 2020 - Initial advisory posted.
March 31, 2021 - Added fixed release for Pulse One
 
Workaround
Implementation
Related Links
CVSS Score4.3 Medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L​​​​​​​
Risk Assessment
Acknowledgements
Alert TypeSA - Security Advisory
Risk LevelMedium
Attachment 1 
Attachment 2 
Legacy ID

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255