CVE:CVE-2018-15726
CNNVD:CNNVD-201809-295
Pulse Secure Pulse Desktop Client是美国Pulse Secure公司的一套用于访问Juniper Pulse Secure网关的终端设备的客户端软件。
Pulse Secure Pulse Desktop Client (macOS) 5.3R5之前的5.3RX版本和9.0R1版本中存在操作系统命令注入漏洞。攻击者可利用该漏洞提升权限。
solution:Upgrade pulsesecure pulse_secure_desktop_client to a higher version than 5.3r1,5.3r1.1,5.3r2,5.3r3,5.3r4,5.3r4.1,5.3r4.2,5.3rx,9.0r1,and avoid the version 5.3r1,5.3r1.1,5.3r2,5.3r3,5.3r4,5.3r4.1,5.3r4.2,5.3rx,9.0r1