Design/Logic Flaw

2021-05-1401:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

JSON

An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to smuggle an HTTP request through an HTTP/2 Header. This vulnerability is resolved in 21.1, 20.3R1, 20.2R1, 20.1R2, 19.2R4, and 18.2R3.

CPENameOperatorVersion
virtual_traffic_managereq20.2
virtual_traffic_managereq20.3
virtual_traffic_managereq19.2
virtual_traffic_managereq20.1
virtual_traffic_managereq19.3
virtual_traffic_managereq19.2 r1
virtual_traffic_managereq19.2 r2
virtual_traffic_managerge18.3
virtual_traffic_managerle19.1
virtual_traffic_managerle18.1

Name	Operator	Version
virtual_traffic_manager	eq	20.2
virtual_traffic_manager	eq	20.3
virtual_traffic_manager	eq	19.2
virtual_traffic_manager	eq	20.1
virtual_traffic_manager	eq	19.3
virtual_traffic_manager	eq	19.2 r1
virtual_traffic_manager	eq	19.2 r2
virtual_traffic_manager	ge	18.3
virtual_traffic_manager	le	19.1
virtual_traffic_manager	le	18.1