CVE-2018-6374

The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-01-31

Last modified

2024-08-05

Weaknesses

CWE-295

Affected products

• Desktop Linux Client (Pulsesecure)

References

• http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43620
• http://www.securityfocus.com/bid/102908