CVE-2016-4787

CRITICAL

Pulse Connect Secure <8.2r1-7.4r13.4 - Info Disclosure

Title source: llm
STIX 2.1

Description

Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1035932

Scores

CVSS v3 10.0
EPSS 0.0284
EPSS Percentile 86.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

Details

Status published
Products (5)
ivanti/connect_secure 8.0
ivanti/connect_secure 8.2
ivanti/connect_secure 8.1
pulsesecure/pulse_connect_secure 7.4
pulsesecure/pulse_connect_secure 8.1r1.0
Published May 26, 2016
Tracked Since Feb 18, 2026