CVE:CVE-2016-2408
CNNVD:CNNVD-201607-1086
Pulse Secure Pulse Desktop Client是美国Pulse Secure公司的一套用于访问Juniper Pulse Secure网关的终端设备的客户端软件。
多款Juniper Networks产品中的client-side组件中存在权限许可和访问控制问题漏洞。本地攻击者可利用该漏洞获取管理员权限。以下产品和版本受到影响：Pulse Secure Desktop Client 5.0r15.1之前的版本，5.1r9.1之前的5.1rX版本，5.2r4.1之前的5.2rX版本，Installer Service和Collaboration 8.0r15.1之前版本，8.1r9.1之前的8.1rX版本，8.2r4.1之前的8.2rX版本，基于Windows平台上的Odyssey Access Client 5.6r18之前的版本。
solution:Upgrade pulsesecure odyssey_access_client to a higher version than 5.6r16.0,and avoid the version (,5.6r16.0]; Upgrade pulsesecure pulse_secure_desktop to a higher version than 5.0r1.0,5.0r2.0,5.0r3.0,5.0r3.1,5.0r4.0,5.0r4.1,5.0r5.0,5.0r6.0,5.0r7.0,5.0r8.0,5.0r8.1,5.0r9.0,5.0r10.0,5.0r11.0,5.0r12.0,5.0r13.0,5.0r13.1,5.0r14.0,5.0r15.0,5.1r1.0,5.1r1.1,5.1r2.0,5.1r3.0,5.1r3.1,5.1r3.2,5.1r4.0,5.1r5.0,5.1r5.1,5.1r6.0,5.1r7.0,5.1r8.0,5.1r9.0,5.2r1.0,5.2r1.1,5.2r2.0,and avoid the version 5.0r1.0,5.0r2.0,5.0r3.0,5.0r3.1,5.0r4.0,5.0r4.1,5.0r5.0,5.0r6.0,5.0r7.0,5.0r8.0,5.0r8.1,5.0r9.0,5.0r10.0,5.0r11.0,5.0r12.0,5.0r13.0,5.0r13.1,5.0r14.0,5.0r15.0,5.1r1.0,5.1r1.1,5.1r2.0,5.1r3.0,5.1r3.1,5.1r3.2,5.1r4.0,5.1r5.0,5.1r5.1,5.1r6.0,5.1r7.0,5.1r8.0,5.1r9.0,5.2r1.0,5.2r1.1,5.2r2.0; Upgrade pulsesecure pulse_secure_security to a higher version than 8.0r1.0,8.0r1.1,8.0r2.0,8.0r3.0,8.0r3.1,8.0r3.2,8.0r4.0,8.0r4.1,8.0r5.0,8.0r6.0,8.0r7.0,8.0r7.1,8.0r8.0,8.0r8.1,8.0r9.0,8.0r10.0,8.0r11.0,8.0r12.1,8.0r13.0,8.0r13.1,8.0r14.0,8.0r15.0,8.1r1.0,8.1r1.1,8.1r2.0,8.1r2.1,8.1r3.0,8.1r3.1,8.1r3.2,8.1r4.0,8.1r4.1,8.1r5.0,8.1r6.0,8.1r7.0,8.1r8.0,8.1r9.0,8.2r1.0,8.2r1.1,8.2r2.0,and avoid the version 8.0r1.0,8.0r1.1,8.0r2.0,8.0r3.0,8.0r3.1,8.0r3.2,8.0r4.0,8.0r4.1,8.0r5.0,8.0r6.0,8.0r7.0,8.0r7.1,8.0r8.0,8.0r8.1,8.0r9.0,8.0r10.0,8.0r11.0,8.0r12.1,8.0r13.0,8.0r13.1,8.0r14.0,8.0r15.0,8.1r1.0,8.1r1.1,8.1r2.0,8.1r2.1,8.1r3.0,8.1r3.1,8.1r3.2,8.1r4.0,8.1r4.1,8.1r5.0,8.1r6.0,8.1r7.0,8.1r8.0,8.1r9.0,8.2r1.0,8.2r1.1,8.2r2.0; Upgrade pulsesecure standalone_pulse_installer_service to a higher version than 7.4r1.0,7.4r2.0,7.4r3.0,7.4r4.0,7.4r5.0,7.4r6.0,7.4r7.0,7.4r8.0,7.4r9.0,7.4r9.1,7.4r9.2,7.4r9.3,7.4r10.0,7.4r11.0,7.4r11.1,7.4r12.0,7.4r13.0,7.4r13.1,7.4r13.2,7.4r13.3,7.4r13.4,7.4r13.5,7.4r13.6,8.0r1.0,8.0r1.1,8.0r2.0,8.0r3.0,8.0r3.1,8.0r3.2,8.0r4.0,8.0r4.1,8.0r5.0,8.0r6.0,8.0r7.0,8.0r7.1,8.0r8.0,8.0r8.1,8.0r9.0,8.0r10.0,8.0r11.0,8.0r12.1,8.0r13.0,8.0r13.1,8.0r14.0,8.0r15.0,8.1r1.0,8.1r1.1,8.1r2.0,8.1r2.1,8.1r3.0,8.1r3.1,8.1r3.2,8.1r4.0,8.1r4.1,8.1r5.0,8.1r6.0,8.1r7.0,8.1r8.0,8.1r9.0,8.2r1.0,8.2r1.1,8.2r2.0,and avoid the version 7.4r1.0,7.4r2.0,7.4r3.0,7.4r4.0,7.4r5.0,7.4r6.0,7.4r7.0,7.4r8.0,7.4r9.0,7.4r9.1,7.4r9.2,7.4r9.3,7.4r10.0,7.4r11.0,7.4r11.1,7.4r12.0,7.4r13.0,7.4r13.1,7.4r13.2,7.4r13.3,7.4r13.4,7.4r13.5,7.4r13.6,8.0r1.0,8.0r1.1,8.0r2.0,8.0r3.0,8.0r3.1,8.0r3.2,8.0r4.0,8.0r4.1,8.0r5.0,8.0r6.0,8.0r7.0,8.0r7.1,8.0r8.0,8.0r8.1,8.0r9.0,8.0r10.0,8.0r11.0,8.0r12.1,8.0r13.0,8.0r13.1,8.0r14.0,8.0r15.0,8.1r1.0,8.1r1.1,8.1r2.0,8.1r2.1,8.1r3.0,8.1r3.1,8.1r3.2,8.1r4.0,8.1r4.1,8.1r5.0,8.1r6.0,8.1r7.0,8.1r8.0,8.1r9.0,8.2r1.0,8.2r1.1,8.2r2.0