CVE-2019-11542

🗓️ 26 Apr 2019 01:40:33Reported by mitreType

Pulse Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1, Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, allows authenticated attacker to execute stack buffer overflow via admin web interface

Reporter	Title	Published	Views	Family All 17
Check Point Advisories	Pulse Connect Secure Stack Buffer Overflow (CVE-2019-11542)	15 Sep 201900:00	–	checkpoint_advisories
CVE	CVE-2019-11542	26 Apr 201901:40	–	cve
Hacker One	X (Formerly Twitter): Potential pre-auth RCE on Twitter VPN	28 May 201907:53	–	hackerone
Hacker One	Uber: Arbitrary File Reading on Uber SSL VPN	17 Jun 201918:51	–	hackerone
Hacker One	U.S. Dept Of Defense: Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://███	21 Aug 201913:03	–	hackerone
Hacker One	U.S. Dept Of Defense: Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://████	14 Sep 201922:51	–	hackerone
Hacker One	U.S. Dept Of Defense: Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://██████ (███)	17 Sep 201907:31	–	hackerone
Ivanti	SA44101 - 2019-04: Out-of-Cycle Advisory: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.0RX	14 Feb 202307:22	–	ivanti
myhack58	Pulse Secure SSL VPN vulnerability alerts-a vulnerability alert-the black bar safety net	27 Aug 201900:00	–	myhack58
NVD	CVE-2019-11542	26 Apr 201902:29	–	nvd

Source	Link
devco	www.devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/
securityfocus	www.securityfocus.com/bid/108073
kb	www.kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101
i	www.i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf
kb	www.kb.cert.org/vuls/id/927237
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010

16 Oct 2019 17:06Current

7.6High risk

Vulners AI Score7.6

CVSS 38

EPSS0.66598