CVE-2016-3985

MEDIUM

Pulse Connect Secure <8.2R1 - Auth Bypass

Title source: llm

Description

The Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse Connect Secure (aka PCS) 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors.

References (2)

Scores

CVSS v3 6.5
EPSS 0.0016
EPSS Percentile 37.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Classification

CWE
CWE-284
Status draft

Affected Products (2)

pulsesecure/pulse_connect_secure
pulsesecure/pulse_connect_secure

Timeline

Published Apr 12, 2016
Tracked Since Feb 18, 2026