HTTP: Pulse Secure Pulse Connect Secure Command Injection
This signature detects attempts to exploit a known vulnerability against Pulse Secure Pulse Connect Secure. A successful attack can lead to Command Injection.
Extended Description
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.
Affected Products
Ivanti connect_secure
References
BugTraq: 108073
CVE: CVE-2019-11539
URL: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101
Short Name
HTTP:MISC:PULSE-PCS-CMD-INJ
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2019-11539 Command Connect Injection Pulse Secure bid:108073
Release Date
09/10/2019
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3682
False Positive
Unknown
Vendors
Ivanti
Pulsesecure
CVSS Score
6.5