CVE-2018-20811

MEDIUM

Pulse Connect Secure 8.3RX < 8.3R2 and 8.1RX < 8.1R12 - Exposure of Sensitive Information via Hidden RPC Service

Title source: llm

A hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2 and 8.1RX before 8.1R12.

Core 1

Core References

Vendor Advisory x_refsource_confirm

CVSS v3 5.3

EPSS 0.0071

EPSS Percentile 72.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-200

Status published

Products (2)

ivanti/connect_secure 8.1 r1.0 (18 CPE variants)

ivanti/connect_secure 8.3 r1

Published Jun 28, 2019

Tracked Since Feb 18, 2026