CVE-2018-6374 | BDVDB-2026-95912 Detail

Description#

The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/102908
http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43620

Exploit#

No public exploit known

History#

Version 12018-01-31Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.