CVE-2016-3985

2022-10-0316:16:16

mitre

www.cve.org

cve-2016-3985

terminal services

remote desktop protocol

pulse connect secure

bypass

authentication

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

The Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse Connect Secure (aka PCS) 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors.

References

www.securitytracker.com/id/1035129

kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40166