Lucene search

[email protected]CVE-2018-14366

HistorySep 06, 2018 - 11:29 p.m.

CVE-2018-14366

2018-09-0623:29:00

CWE-601

[email protected]

web.nvd.nist.gov

cve-2018-14366

pulse secure

pulse policy secure

open redirect

vulnerability

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability.

Affected configurations

NVD

Node

ivanticonnect_secureMatch8.1

ivanticonnect_secureMatch8.3

pulsesecurepulse_connect_secureMatch8.1r1.0

pulsesecurepulse_connect_secureMatch8.1rx

pulsesecurepulse_connect_secureMatch8.3rx

pulsesecurepulse_policy_secureMatch5.2r1.0

pulsesecurepulse_policy_secureMatch5.2r2.0

pulsesecurepulse_policy_secureMatch5.2r3.0

pulsesecurepulse_policy_secureMatch5.2r3.2

pulsesecurepulse_policy_secureMatch5.2r4.0

pulsesecurepulse_policy_secureMatch5.2r5.0

pulsesecurepulse_policy_secureMatch5.2r6.0

pulsesecurepulse_policy_secureMatch5.2r7.0

pulsesecurepulse_policy_secureMatch5.2r7.1

pulsesecurepulse_policy_secureMatch5.2r8.0

pulsesecurepulse_policy_secureMatch5.2r9.0

pulsesecurepulse_policy_secureMatch5.2r9.1

pulsesecurepulse_policy_secureMatch5.2rx

pulsesecurepulse_policy_secureMatch5.4r1

pulsesecurepulse_policy_secureMatch5.4r2

pulsesecurepulse_policy_secureMatch5.4r2.1

pulsesecurepulse_policy_secureMatch5.4r3

pulsesecurepulse_policy_secureMatch5.4rx

CPENameOperatorVersion
ivanti:connect_secureivanti connect secureeq8.1
ivanti:connect_secureivanti connect secureeq8.3
pulsesecure:pulse_connect_securepulsesecure pulse connect secureeq8.1r1.0
pulsesecure:pulse_connect_securepulsesecure pulse connect secureeq8.1rx
pulsesecure:pulse_connect_securepulsesecure pulse connect secureeq8.3rx
pulsesecure:pulse_policy_securepulsesecure pulse policy secureeq5.2r1.0
pulsesecure:pulse_policy_securepulsesecure pulse policy secureeq5.2r2.0
pulsesecure:pulse_policy_securepulsesecure pulse policy secureeq5.2r3.0
pulsesecure:pulse_policy_securepulsesecure pulse policy secureeq5.2r3.2
pulsesecure:pulse_policy_securepulsesecure pulse policy secureeq5.2r4.0

CPE	Name	Operator	Version
ivanti:connect_secure	ivanti connect secure	eq	8.1
ivanti:connect_secure	ivanti connect secure	eq	8.3
pulsesecure:pulse_connect_secure	pulsesecure pulse connect secure	eq	8.1r1.0
pulsesecure:pulse_connect_secure	pulsesecure pulse connect secure	eq	8.1rx
pulsesecure:pulse_connect_secure	pulsesecure pulse connect secure	eq	8.3rx
pulsesecure:pulse_policy_secure	pulsesecure pulse policy secure	eq	5.2r1.0
pulsesecure:pulse_policy_secure	pulsesecure pulse policy secure	eq	5.2r2.0
pulsesecure:pulse_policy_secure	pulsesecure pulse policy secure	eq	5.2r3.0
pulsesecure:pulse_policy_secure	pulsesecure pulse policy secure	eq	5.2r3.2
pulsesecure:pulse_policy_secure	pulsesecure pulse policy secure	eq	5.2r4.0

Rows per page:

1-10 of 231

References

kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

Related for CVE-2018-14366

prion1 cvelist1 nvd1