CVE-2021-22937

CVE-2021-22937 affects Pulse Connect Secure (PCS) prior to version 9.1R12. An authenticated administrator could write arbitrary files by uploading a malicious archive via the administrator web interface, potentially enabling remote code execution with elevated privileges. Public advisories (Ivant...

Pulse Connect Secure 授权 RCE (CVE-2021-22937) 漏洞

...

Pulse Secure VPNs Get New Urgent Update for Poorly Patched Critical Flaw

Pulse Secure has shipped a fix for a critical post-authentication remote code execution RCE vulnerability in its Connect Secure virtual private network VPN appliances to address an incomplete patch for an actively exploited flaw it previously resolved in October 2020. "The Pulse Connect Secure...

CVE-2021-22937

creationtimestamp| type| source ---|---|--- 2021-08-06 13:54:25+00:00| published-proof-of-concept| Telegram/OlmIWfCf04jqftw8Cq-ou5J6g6om6u87bzbeyzb222HA 2021-08-06 14:51:28+00:00| published-proof-of-concept| https://t.me/CyberSecurityIL/4542 2021-08-06 17:57:30+00:00| published-proof-of-concept|...

Pulse Connect Secure < 9.1R12 (SA44858)

According to its self-reported version, the version of Pulse Connect Secure running on the remote host is prior to 9.1R12. It is, therefore, affected by multiple vulnerabilities, including: - A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perfo...