Lucene search
HistoryJun 28, 2019 - 6:15 p.m.
CVE-2018-20809
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
43.0%
A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.
Affected configurations
Node
ivanticonnect_secureMatch8.3r1
ORivanticonnect_secureMatch8.3r2
ORivanticonnect_secureMatch8.3r2.1
ORivanticonnect_secureMatch8.3r3
ORivanticonnect_secureMatch8.3r4
ORpulsesecurepulse_policy_secureMatch4.4r1.0
ORpulsesecurepulse_policy_secureMatch4.4r1.1
ORpulsesecurepulse_policy_secureMatch4.4r10
ORpulsesecurepulse_policy_secureMatch4.4r11.1
ORpulsesecurepulse_policy_secureMatch4.4r12.0
ORpulsesecurepulse_policy_secureMatch4.4r13.1
ORpulsesecurepulse_policy_secureMatch4.4r13.2
ORpulsesecurepulse_policy_secureMatch4.4r13.3
ORpulsesecurepulse_policy_secureMatch4.4r130
ORpulsesecurepulse_policy_secureMatch4.4r2.0
ORpulsesecurepulse_policy_secureMatch4.4r3.0
ORpulsesecurepulse_policy_secureMatch4.4r4.0
ORpulsesecurepulse_policy_secureMatch4.4r5.0
ORpulsesecurepulse_policy_secureMatch4.4r6.0
ORpulsesecurepulse_policy_secureMatch4.4r7.0
ORpulsesecurepulse_policy_secureMatch4.4r8.0
ORpulsesecurepulse_policy_secureMatch5.0r1.0
ORpulsesecurepulse_policy_secureMatch5.0r10.0
ORpulsesecurepulse_policy_secureMatch5.0r11.0
ORpulsesecurepulse_policy_secureMatch5.0r12.1
ORpulsesecurepulse_policy_secureMatch5.0r13.0
ORpulsesecurepulse_policy_secureMatch5.0r13.1
ORpulsesecurepulse_policy_secureMatch5.0r2.0
ORpulsesecurepulse_policy_secureMatch5.0r3.0
ORpulsesecurepulse_policy_secureMatch5.0r3.2
ORpulsesecurepulse_policy_secureMatch5.0r4.0
ORpulsesecurepulse_policy_secureMatch5.0r4.1
ORpulsesecurepulse_policy_secureMatch5.0r5.0
ORpulsesecurepulse_policy_secureMatch5.0r6.0
ORpulsesecurepulse_policy_secureMatch5.0r7.0
ORpulsesecurepulse_policy_secureMatch5.0r7.1
ORpulsesecurepulse_policy_secureMatch5.0r8.0
ORpulsesecurepulse_policy_secureMatch5.0r8.1
ORpulsesecurepulse_policy_secureMatch5.0r9.0
ORpulsesecurepulse_policy_secureMatch5.1r1.0
ORpulsesecurepulse_policy_secureMatch5.1r1.1
ORpulsesecurepulse_policy_secureMatch5.1r10.0
ORpulsesecurepulse_policy_secureMatch5.1r11.0
ORpulsesecurepulse_policy_secureMatch5.1r12.0
ORpulsesecurepulse_policy_secureMatch5.1r12.1
ORpulsesecurepulse_policy_secureMatch5.1r13.0
ORpulsesecurepulse_policy_secureMatch5.1r14.0
ORpulsesecurepulse_policy_secureMatch5.1r2.0
ORpulsesecurepulse_policy_secureMatch5.1r2.1
ORpulsesecurepulse_policy_secureMatch5.1r3.0
ORpulsesecurepulse_policy_secureMatch5.1r3.2
ORpulsesecurepulse_policy_secureMatch5.1r4.0
ORpulsesecurepulse_policy_secureMatch5.1r5.0
ORpulsesecurepulse_policy_secureMatch5.1r6.0
ORpulsesecurepulse_policy_secureMatch5.1r7.0
ORpulsesecurepulse_policy_secureMatch5.1r8.0
ORpulsesecurepulse_policy_secureMatch5.1r9.0
ORpulsesecurepulse_policy_secureMatch5.1r9.1
ORpulsesecurepulse_policy_secureMatch5.2r1.0
ORpulsesecurepulse_policy_secureMatch5.2r10.0
ORpulsesecurepulse_policy_secureMatch5.2r11.0
ORpulsesecurepulse_policy_secureMatch5.2r2.0
ORpulsesecurepulse_policy_secureMatch5.2r3.0
ORpulsesecurepulse_policy_secureMatch5.2r3.2
ORpulsesecurepulse_policy_secureMatch5.2r4.0
ORpulsesecurepulse_policy_secureMatch5.2r5.0
ORpulsesecurepulse_policy_secureMatch5.2r6.0
ORpulsesecurepulse_policy_secureMatch5.2r7.0
ORpulsesecurepulse_policy_secureMatch5.2r7.1
ORpulsesecurepulse_policy_secureMatch5.2r8.0
ORpulsesecurepulse_policy_secureMatch5.2r9.0
ORpulsesecurepulse_policy_secureMatch5.2r9.1
ORpulsesecurepulse_policy_secureMatch5.3r1.0
ORpulsesecurepulse_policy_secureMatch5.3r1.1
ORpulsesecurepulse_policy_secureMatch5.3r10.0
ORpulsesecurepulse_policy_secureMatch5.3r11.0
ORpulsesecurepulse_policy_secureMatch5.3r12.0
ORpulsesecurepulse_policy_secureMatch5.3r2.0
ORpulsesecurepulse_policy_secureMatch5.3r3.0
ORpulsesecurepulse_policy_secureMatch5.3r3.1
ORpulsesecurepulse_policy_secureMatch5.3r4.0
ORpulsesecurepulse_policy_secureMatch5.3r4.1
ORpulsesecurepulse_policy_secureMatch5.3r5.0
ORpulsesecurepulse_policy_secureMatch5.3r5.1
ORpulsesecurepulse_policy_secureMatch5.3r5.2
ORpulsesecurepulse_policy_secureMatch5.3r6.0
ORpulsesecurepulse_policy_secureMatch5.3r7.0
ORpulsesecurepulse_policy_secureMatch5.3r8.0
ORpulsesecurepulse_policy_secureMatch5.3r8.1
ORpulsesecurepulse_policy_secureMatch5.3r8.2
ORpulsesecurepulse_policy_secureMatch5.3r9.0
ORpulsesecurepulse_policy_secureMatch5.4r1
ORpulsesecurepulse_policy_secureMatch5.4r2
ORpulsesecurepulse_policy_secureMatch5.4r2.1
ORpulsesecurepulse_policy_secureMatch5.4r3
ORpulsesecurepulse_policy_secureMatch5.4r4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ivanti | connect_secure | 8.3 | cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:* |
| ivanti | connect_secure | 8.3 | cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:* |
| ivanti | connect_secure | 8.3 | cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:* |
| ivanti | connect_secure | 8.3 | cpe:2.3:a:ivanti:connect_secure:8.3:r3:*:*:*:*:*:* |
| ivanti | connect_secure | 8.3 | cpe:2.3:a:ivanti:connect_secure:8.3:r4:*:*:*:*:*:* |
| pulsesecure | pulse_policy_secure | 4.4 | cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r1.0:*:*:*:*:*:* |
| pulsesecure | pulse_policy_secure | 4.4 | cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r1.1:*:*:*:*:*:* |
| pulsesecure | pulse_policy_secure | 4.4 | cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r10:*:*:*:*:*:* |
| pulsesecure | pulse_policy_secure | 4.4 | cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r11.1:*:*:*:*:*:* |
| pulsesecure | pulse_policy_secure | 4.4 | cpe:2.3:a:pulsesecure:pulse_policy_secure:4.4:r12.0:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2018-20809
2019-03-16 03:00:00
prion
prion
Code injection
2019-06-28 18:15:00
cve
cve
CVE-2018-20809
2019-06-28 18:15:11
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
43.0%
Related for NVD:CVE-2018-20809