Pulse Secure Pulse Connect Secure Trust Management Vulnerability

Pulse Secure Pulse Connect Secure aka PCS, formerly known as Juniper Junos Pulse is an SSL VPN solution from Pulse Secure, Inc. in the United States. A security vulnerability exists in Ivanti Pulse Secure Pulse Connect Secure versions prior to 9.1R12 that stems from storing the administrator...

CVE-2021-44720: Use of Hard-coded Credentials

In Ivanti Pulse Secure Pulse Connect Secure PCS before 9.1R12, the administrator password is stored in the HTML source code of the "Maintenance Push Configuration Targets Target Name" targets.cgi screen. A read-only administrative user can escalate to a read-write administrative role...