gsd-2018-20809
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.
Aliases
Aliases



{
  "GSD": {
    "alias": "CVE-2018-20809",
    "description": "A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.",
    "id": "GSD-2018-20809"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2018-20809"
      ],
      "details": "A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.",
      "id": "GSD-2018-20809",
      "modified": "2023-12-13T01:22:29.431349Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2018-20809",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/",
            "refsource": "CONFIRM",
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "2871AAD9-FC12-4E2D-B722-0F721D7FE101",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "2A319BAB-F483-4926-9700-760D8025F747",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:*",
                    "matchCriteriaId": "AA6BD7FD-29A3-468C-8A85-63202EB1B625",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r3:*:*:*:*:*:*",
                    "matchCriteriaId": "00AA23DF-CA30-41FC-9563-C95BA7D31129",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r4:*:*:*:*:*:*",
                    "matchCriteriaId": "D85A6292-EE41-487C-A1DC-0E8E443A8075",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r1.0:*:*:*:*:*:*",
                    "matchCriteriaId": "04EA64A9-1F37-4B59-81A8-68CDE219E7B0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r1.1:*:*:*:*:*:*",
                    "matchCriteriaId": "E2DAD51B-A3DC-48D4-A254-6C4FF0130CC6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r10:*:*:*:*:*:*",
                    "matchCriteriaId": "AFBBCD31-7E72-4BDC-982B-1097D7FB7007",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r11.1:*:*:*:*:*:*",
                    "matchCriteriaId": "72C6CB5E-6734-47C8-8F7F-4E3BE8A0EB70",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r12.0:*:*:*:*:*:*",
                    "matchCriteriaId": "1A610225-1F08-4282-B2E9-E965CE2BBE1E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r13.1:*:*:*:*:*:*",
                    "matchCriteriaId": "BA36058B-9DE7-40DA-8A5E-C3293B2C1489",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r13.2:*:*:*:*:*:*",
                    "matchCriteriaId": "99B5130F-59ED-45F5-B4EF-9A673800634D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r13.3:*:*:*:*:*:*",
                    "matchCriteriaId": "8427949F-B4AE-4E7B-99A1-7D3508ADCE6E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r130:*:*:*:*:*:*",
                    "matchCriteriaId": "71383254-0AF7-4F5A-89ED-8EFC42D023B9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r2.0:*:*:*:*:*:*",
                    "matchCriteriaId": "297C7B31-40A2-4870-B434-9EDA0D9E9873",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r3.0:*:*:*:*:*:*",
                    "matchCriteriaId": "A397F94F-5C95-4F33-91C2-463CD9494902",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r4.0:*:*:*:*:*:*",
                    "matchCriteriaId": "F4203DB8-B288-4E5E-AA12-124C4E94E219",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r5.0:*:*:*:*:*:*",
                    "matchCriteriaId": "C515B222-365C-4C0B-9D02-499FBBD2EBBA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r6.0:*:*:*:*:*:*",
                    "matchCriteriaId": "07CA9366-78AB-49AF-98CA-4C88178804AA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r7.0:*:*:*:*:*:*",
                    "matchCriteriaId": "39A45095-D4C7-47B7-889B-15ADA845E5A8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r8.0:*:*:*:*:*:*",
                    "matchCriteriaId": "1BBA93A6-DEE3-4D9B-BA19-ED03123A7404",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r1.0:*:*:*:*:*:*",
                    "matchCriteriaId": "94256375-336B-41EF-A306-BC9BA6EFF355",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r10.0:*:*:*:*:*:*",
                    "matchCriteriaId": "8421D0D2-A05D-437F-B9EF-FF367D2493E3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r11.0:*:*:*:*:*:*",
                    "matchCriteriaId": "C5BBA362-0E45-4749-AA5F-FD0FFFD2DF20",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r12.1:*:*:*:*:*:*",
                    "matchCriteriaId": "463924E2-7EE3-4FE8-9BA9-EB39B77437DF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r13.0:*:*:*:*:*:*",
                    "matchCriteriaId": "75467D95-049A-4DB1-AF84-695578880E37",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r13.1:*:*:*:*:*:*",
                    "matchCriteriaId": "A80D8FDB-A360-4BDE-989E-A1F4C5AF7CDA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r2.0:*:*:*:*:*:*",
                    "matchCriteriaId": "D004C44F-2495-40B4-9427-23A6B5272582",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r3.0:*:*:*:*:*:*",
                    "matchCriteriaId": "9EAA943A-D6C1-4AD6-BB21-DD0F3063BC68",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r3.2:*:*:*:*:*:*",
                    "matchCriteriaId": "3827608A-D707-4F3F-AE7B-87400BDB7E74",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r4.0:*:*:*:*:*:*",
                    "matchCriteriaId": "8364B794-1D25-4115-8F44-EC2D373B7662",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r4.1:*:*:*:*:*:*",
                    "matchCriteriaId": "0E3DC810-879D-4069-A436-11F527E9ACBA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r5.0:*:*:*:*:*:*",
                    "matchCriteriaId": "21FC1CFD-42DF-4A7A-A3C9-834FD5747C51",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r6.0:*:*:*:*:*:*",
                    "matchCriteriaId": "71177578-D169-4357-AE4D-ECA5ACABEF76",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r7.0:*:*:*:*:*:*",
                    "matchCriteriaId": "C9E30E2F-E8CF-4872-9E7D-5A30C0860DD6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r7.1:*:*:*:*:*:*",
                    "matchCriteriaId": "E0BA2D36-2B01-4EA4-AF50-80CD80DF28F5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r8.0:*:*:*:*:*:*",
                    "matchCriteriaId": "EF8BBDA0-6BFA-43F1-8E61-F12D7479CF05",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r8.1:*:*:*:*:*:*",
                    "matchCriteriaId": "A7065B88-2C86-4E3E-BD9F-B3E2C9312869",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.0:r9.0:*:*:*:*:*:*",
                    "matchCriteriaId": "0CB2E5A8-9ECF-4974-A8B8-08FA21A52C07",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r1.0:*:*:*:*:*:*",
                    "matchCriteriaId": "1D46393F-9199-423F-9C05-5644F588F0FB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r1.1:*:*:*:*:*:*",
                    "matchCriteriaId": "A5FA206F-DF4C-4193-9B15-25AF1A692486",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r10.0:*:*:*:*:*:*",
                    "matchCriteriaId": "BF4F3BBD-A6A4-4083-A7FF-2E1C197138AB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r11.0:*:*:*:*:*:*",
                    "matchCriteriaId": "29EE0344-F891-41A2-8DC4-7347E151D113",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r12.0:*:*:*:*:*:*",
                    "matchCriteriaId": "742ADD2A-ECC7-4D6C-924C-54967BF1449B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r12.1:*:*:*:*:*:*",
                    "matchCriteriaId": "D4EEA944-1D31-48E1-B525-BF5C2A5B79D3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r13.0:*:*:*:*:*:*",
                    "matchCriteriaId": "AE951F7F-F85A-4930-A5B9-02E9AFC649A7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r14.0:*:*:*:*:*:*",
                    "matchCriteriaId": "3B263752-66AA-457D-9C4F-90BF9CB6223E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r2.0:*:*:*:*:*:*",
                    "matchCriteriaId": "42F48EF1-2F0C-45F8-AA12-B8B02A9DCC5D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r2.1:*:*:*:*:*:*",
                    "matchCriteriaId": "7E9BC208-CADD-4BDD-B858-4191FC4AA4E1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r3.0:*:*:*:*:*:*",
                    "matchCriteriaId": "A8066309-8BCD-4508-9045-338B2BF96209",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r3.2:*:*:*:*:*:*",
                    "matchCriteriaId": "A017FBE9-5524-46E4-8020-13867CD371D3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r4.0:*:*:*:*:*:*",
                    "matchCriteriaId": "C3EBC795-9754-4095-9217-B635B73109C3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r5.0:*:*:*:*:*:*",
                    "matchCriteriaId": "CF7A91D9-888A-425A-A63D-2EC1A4A3D773",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r6.0:*:*:*:*:*:*",
                    "matchCriteriaId": "0F94D849-C5D7-4EC6-B2BF-DDD450FC3B1D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r7.0:*:*:*:*:*:*",
                    "matchCriteriaId": "BD5F01FD-0A10-406D-8FD5-4CBC3649AE9A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r8.0:*:*:*:*:*:*",
                    "matchCriteriaId": "4712B1FE-8B3A-4A1C-8EAE-BB1D98013E7B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r9.0:*:*:*:*:*:*",
                    "matchCriteriaId": "257AE816-2893-4646-9351-7AE38433F6E4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1:r9.1:*:*:*:*:*:*",
                    "matchCriteriaId": "321AE625-4FFC-441C-8CED-9FB1F7D0AC20",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r1.0:*:*:*:*:*:*",
                    "matchCriteriaId": "E7F9AA1E-7BF4-4E58-97BE-136924689E52",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r10.0:*:*:*:*:*:*",
                    "matchCriteriaId": "2D06CEEE-2DCF-433D-B894-568EEF6E1C4F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r11.0:*:*:*:*:*:*",
                    "matchCriteriaId": "69C15133-1A8F-4C6A-99ED-2BB47CD878A9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r2.0:*:*:*:*:*:*",
                    "matchCriteriaId": "7711F334-1743-433E-A30D-630EAA72061C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r3.0:*:*:*:*:*:*",
                    "matchCriteriaId": "ACBBAE14-3BBD-4425-AB53-D0A2998B341A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r3.2:*:*:*:*:*:*",
                    "matchCriteriaId": "85DAD6CD-15E7-4401-9DF8-135B6D8C629E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r4.0:*:*:*:*:*:*",
                    "matchCriteriaId": "67322873-15B9-49E9-9828-3B46A83BAA03",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r5.0:*:*:*:*:*:*",
                    "matchCriteriaId": "33E8CF2C-C51E-4470-9CA4-A8FE6EAC9AF8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r6.0:*:*:*:*:*:*",
                    "matchCriteriaId": "EE9EBE2F-8B10-479A-BDC4-E8777836B72F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r7.0:*:*:*:*:*:*",
                    "matchCriteriaId": "E05CD6D2-B0CB-48D4-874C-A0D2A9FC9E89",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r7.1:*:*:*:*:*:*",
                    "matchCriteriaId": "BD61ABE7-E1B8-4370-9DDC-FCDED9839C82",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r8.0:*:*:*:*:*:*",
                    "matchCriteriaId": "BD067BC2-5FCE-4CB5-9D2A-F1F2CFAC9368",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r9.0:*:*:*:*:*:*",
                    "matchCriteriaId": "76DE6AB9-13E7-4A73-95E6-213C3FD67C84",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2:r9.1:*:*:*:*:*:*",
                    "matchCriteriaId": "0595DA20-8C20-47E3-B91A-A437B6585008",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r1.0:*:*:*:*:*:*",
                    "matchCriteriaId": "3E682F9A-BEB3-44ED-AAE6-3297D0BB6FE3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r1.1:*:*:*:*:*:*",
                    "matchCriteriaId": "34ECEAD1-0499-44A5-8033-03846E538638",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r10.0:*:*:*:*:*:*",
                    "matchCriteriaId": "46B85E85-81B7-40A3-BA5E-CFBB56483A22",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r11.0:*:*:*:*:*:*",
                    "matchCriteriaId": "B11A814F-A66D-4432-A134-7F92831ED25A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r12.0:*:*:*:*:*:*",
                    "matchCriteriaId": "97EFF4AB-3B41-46FE-9A7A-5B23545D7520",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r2.0:*:*:*:*:*:*",
                    "matchCriteriaId": "F7BDDED9-6D42-4C67-A1F2-AC64B9B56370",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r3.0:*:*:*:*:*:*",
                    "matchCriteriaId": "B1A3B268-E087-4096-A5C9-C323E32056F0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r3.1:*:*:*:*:*:*",
                    "matchCriteriaId": "59691231-D331-4BD1-8372-82F46E1AF6E5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r4.0:*:*:*:*:*:*",
                    "matchCriteriaId": "C0C0AF53-782F-48CE-B40F-1373695EC125",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r4.1:*:*:*:*:*:*",
                    "matchCriteriaId": "0EF441E2-33F3-47CE-94F9-B0EAAF7C8E5F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r5.0:*:*:*:*:*:*",
                    "matchCriteriaId": "91E95CD9-BBB3-43C5-B4A9-696F0E233666",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r5.1:*:*:*:*:*:*",
                    "matchCriteriaId": "600CE2E9-7BAA-48F5-8024-76F276261158",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r5.2:*:*:*:*:*:*",
                    "matchCriteriaId": "8DB55582-29D3-4133-9184-82B983E2858B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r6.0:*:*:*:*:*:*",
                    "matchCriteriaId": "B869F72D-46E4-4E63-B917-E9F33BA2FEFB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r7.0:*:*:*:*:*:*",
                    "matchCriteriaId": "890BAEE0-651B-4DC9-8CE8-A02DADB8E594",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r8.0:*:*:*:*:*:*",
                    "matchCriteriaId": "0DE14B69-AF02-42F2-87DB-7745D67430DD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r8.1:*:*:*:*:*:*",
                    "matchCriteriaId": "B1F85B41-B468-47E1-84E9-54E739A4E0E6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r8.2:*:*:*:*:*:*",
                    "matchCriteriaId": "EC4CD2B4-DE7A-4B02-8589-00A6B9376E16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3:r9.0:*:*:*:*:*:*",
                    "matchCriteriaId": "7006738A-B971-4DEB-A36E-60CE0B898896",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "D7D1B75B-CFB5-48ED-847A-D60E14A72C71",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "5B1543C9-3A4B-4DDC-ADD4-20EA6F44AA19",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4:r2.1:*:*:*:*:*:*",
                    "matchCriteriaId": "ECA76217-878B-426D-8C9C-2FEA1A81EC66",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4:r3:*:*:*:*:*:*",
                    "matchCriteriaId": "623D0428-4DE6-4A2C-931D-4AEEFC5E9970",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4:r4:*:*:*:*:*:*",
                    "matchCriteriaId": "7FC3625D-07A0-4E2F-BD8A-D831ECFA51CE",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX."
          },
          {
            "lang": "es",
            "value": "Un mensaje manipulado puede provocar que el servidor web se bloquee con Pulse Secure Pulse Connect Secure (PCS) versi\u00f3n 8.3RX en versiones anteriores a 8.3R5 y Pulse Policy Secure versi\u00f3n 5.4RX versiones anteriores a 5.4R5. Esto no es aplicable a PCS versi\u00f3n 8.1RX."
          }
        ],
        "id": "CVE-2018-20809",
        "lastModified": "2024-02-27T21:04:17.560",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2019-06-28T18:15:11.003",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-20"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.