Information disclosure

2019-06-2818:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.5%

JSON

An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel (when Traffic Enforcement was enabled) exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack (IPv4/IPv6) endpoints.

CPENameOperatorVersion
pulse_secure_desktop_clienteq4.0 r1.0
pulse_secure_desktop_clienteq4.0 r2.0
pulse_secure_desktop_clienteq4.0 r3.0
pulse_secure_desktop_clienteq4.0 r4.0
pulse_secure_desktop_clienteq4.0 r5.0
pulse_secure_desktop_clienteq4.0 r6.0
pulse_secure_desktop_clienteq4.0 r7.0
pulse_secure_desktop_clienteq4.0 r8.0
pulse_secure_desktop_clienteq4.0 r9.0
pulse_secure_desktop_clienteq4.0 r9.1

Name	Operator	Version
pulse_secure_desktop_client	eq	4.0 r1.0
pulse_secure_desktop_client	eq	4.0 r2.0
pulse_secure_desktop_client	eq	4.0 r3.0
pulse_secure_desktop_client	eq	4.0 r4.0
pulse_secure_desktop_client	eq	4.0 r5.0
pulse_secure_desktop_client	eq	4.0 r6.0
pulse_secure_desktop_client	eq	4.0 r7.0
pulse_secure_desktop_client	eq	4.0 r8.0
pulse_secure_desktop_client	eq	4.0 r9.0
pulse_secure_desktop_client	eq	4.0 r9.1