Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:MISC:PULSE-GUACAMOLE-ID

Severity

Major

Recommended

Yes

Recommended Action

Drop

Category

HTTP

Keywords

Pulse Secure Guacamole URI Information Disclosure

Release Date

2019/10/09

Update Number

3216

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: Pulse Secure Guacamole URI Information Disclosure


This signature detects attempts to exploit a known vulnerability against Pulse Secure. A successful attack can lead to sensitive information disclosure.

Extended Description

In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .

Affected Products

  • Pulsesecure pulse_connect_secure 8.2
  • Pulsesecure pulse_connect_secure 8.3
  • Pulsesecure pulse_connect_secure 9.0

References

  • BugTraq: 108073
  • CVE: CVE-2019-11510
  • URL: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out