PT-2020-20050

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions prior to 9.1R9 Description The issue concerns a client registry privilege escalation attack. It requires a server-side upgrade due to the Standalone Host Checker Client Windows and Windows PDC...

Pulse Secure Pulse Secure Desktop Information Disclosure Vulnerability

Pulse Secure Pulse Desktop Client is a suite of client software from Pulse Secure USA for accessing end devices on Juniper Pulse Secure gateways. An information disclosure vulnerability exists in Pulse Secure Pulse Secure Desktop 9.0R1 and prior versions. The vulnerability stems from an error in...

CVE-2018-20812

An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...

CVE-2018-20812

An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...

PT-2019-10251

Name of the Vulnerable Software and Affected Versions: Pulse Secure Desktop versions 9.0R1 and below Description: The issue is related to information exposure where IPv6 DNS traffic is sent outside of the VPN tunnel when Traffic Enforcement is enabled. This problem is specific to dual-stack...

CVE-2018-20812: Exposure of Sensitive Information to an Unauthorized Actor

An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...

CVE-2018-11002

Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...

PT-2018-10235

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions 5.3 up to and including 6.0 build 1769 Description The issue is related to Insecure Permissions in the Pulse Secure Desktop Client on Windows. Recommendations For Pulse Secure Desktop Client versions 5.3 up...

CVE-2018-11002: Incorrect Permission Assignment for Critical Resource

Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...

Pulse Secure Desktop Formatting String Vulnerability

Pulse Secure Desktop is a suite of client software from Pulse Secure USA for endpoint devices that access Juniper Pulse Secure gateways. A formatting string vulnerability exists in Pulse Secure Desktop macOS versions 5.3RX prior to 5.3R5 and 9.0R1. A local attacker could exploit this vulnerabilit...

CVE-2018-15749

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...

CVE-2018-15726

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability...

CVE-2018-15865

The Pulse Secure Desktop macOS has a Privilege Escalation Vulnerability...

PT-2018-13174

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop macOS versions 5.3RX before 5.3R5 Pulse Secure Desktop macOS version 9.0R1 Description The issue is related to a Privilege Escalation problem. Recommendations For Pulse Secure Desktop macOS versions 5.3RX before 5.3R5,...

PT-2018-13179

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop macOS versions 5.3RX through 5.3R4 Pulse Secure Desktop macOS version 9.0R1 Description The issue is related to a Format String Vulnerability. Recommendations For Pulse Secure Desktop macOS versions 5.3RX through 5.3R4,...

CVE-2018-15865: Undefined Security Weakness

The Pulse Secure Desktop macOS has a Privilege Escalation Vulnerability...

CVE-2018-15726: Improper Neutralization of Special Elements used in an OS Command

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability...

CVE-2018-15749: Use of Externally-Controlled Format String

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...

PT-2018-13254

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop macOS affected versions not specified Description The issue is related to a Privilege Escalation problem. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

Pulse Secure Desktop Linux clients GUI component man-in-the-middle bypass security vulnerability

Pulse Secure Desktop Linux clients formerly known as Juniper Junos Pulse is Juniper Networks' suite of Linux-based client software for accessing endpoint devices on the Juniper Pulse Secure Gateway.The GUI component also known as PulseUI is one of the graphical user interfaces. The GUI component...