← Back

CVE-2018-15726

nvd nist
Published: Sep 6, 2018Modified: Nov 21, 2024

JSON object

Loading...
5.3
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Exploitability: 1.8 / Impact: 3.4
Source: NVD

Description

The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability.

Affected (9)

Pulsesecure
1 product
Pulse Secure Desktop Client
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Pulsesecure
Pulse Secure Desktop Client
Version 5.3r1.1
Pulse Secure Desktop Client
Version 5.3r1
Pulse Secure Desktop Client
Version 5.3r2
Pulse Secure Desktop Client
Version 5.3r3
Pulse Secure Desktop Client
Version 5.3r4.1
Pulse Secure Desktop Client
Version 5.3r4.2
Pulse Secure Desktop Client
Version 5.3r4
Pulse Secure Desktop Client
Version 5.3rx
Pulse Secure Desktop Client
Version 9.0r1

Related CWEs

CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.