← Back

CVE-2018-15749

nvd nist
Published: Sep 6, 2018Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability.

Affected (9)

Pulsesecure
1 product
Pulse Secure Desktop Client
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Pulsesecure
Pulse Secure Desktop Client
Version 5.3r1.1
Pulse Secure Desktop Client
Version 5.3r1
Pulse Secure Desktop Client
Version 5.3r2
Pulse Secure Desktop Client
Version 5.3r3
Pulse Secure Desktop Client
Version 5.3r4.1
Pulse Secure Desktop Client
Version 5.3r4.2
Pulse Secure Desktop Client
Version 5.3r4
Pulse Secure Desktop Client
Version 5.3rx
Pulse Secure Desktop Client
Version 9.0r1

Related CWEs

CWE-134
Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (2)

Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.