CVE-2016-4787
10.0
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
Exploitability: 3.9 / Impact: 5.8
Source: NVD
Description
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.
Affected (5)
Products: Ivanti: Connect Secure · Pulsesecure: Pulse Connect Secure
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.2 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.4 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.1 | |
| Version 8.1r1.0 |
References (4)
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.