CVE:CVE-2019-11540
CNNVD:CNNVD-201904-1241
Pulse Secure Pulse Connect Secure（又名PCS，前称Juniper Junos Pulse）和Pulse Policy Secure都是美国Pulse Secure公司的产品。Pulse Connect Secure是一套SSL VPN解决方案。Pulse Policy Secure是一套网络准入控制解决方案。
Pulse Secure PCS和Pulse Policy Secure中存在授权问题漏洞，该漏洞源于网络系统或产品中缺少身份验证措施或身份验证强度不足。以下产品和版本受到影响：Pulse Secure Pulse Connect Secure 9.0R3.4之前的9.0RX版本，8.3R7.1之前的8.3RX版本；Pulse Policy Secure 9.0R3.2之前的9.0RX版本，5.4R7.1之前的5.4RX版本。
solution:Upgrade pulsesecure pulse_connect_secure to a higher version than 8.3,8.3rx,9.0r1,9.0r2,9.0r2.1,9.0r3,9.0r3.1,9.0r3.2,9.0rx,and avoid the version 8.3,8.3rx,9.0r1,9.0r2,9.0r2.1,9.0r3,9.0r3.1,9.0r3.2,9.0rx; Upgrade pulsesecure pulse_policy_secure to a higher version than 5.4r1,5.4r2,5.4r2.1,5.4r3,5.4r4,5.4r5,5.4r5.2,5.4r6,5.4r6.1,5.4r7,5.4rx,9.0r1,9.0r2,9.0r2.1,9.0r3,9.0r3.1,9.0rx,and avoid the version 5.4r1,5.4r2,5.4r2.1,5.4r3,5.4r4,5.4r5,5.4r5.2,5.4r6,5.4r6.1,5.4r7,5.4rx,9.0r1,9.0r2,9.0r2.1,9.0r3,9.0r3.1,9.0rx