CVE:CVE-2019-11538
CNNVD:CNNVD-201904-1236
Pulse Secure Pulse Connect Secure（又名PCS，前称Juniper Junos Pulse）是美国Pulse Secure公司的一套SSL VPN解决方案。
Pulse Secure Pulse Connect Secure 中存在后置链接漏洞。攻击者可利用该漏洞访问受影响设备上的任意文件内容。以下版本受到影响：Pulse Secure PCS 9.0R3.4之前的9.0RX版本，8.3R7.1之前的8.3RX版本，8.2R12.1之前的8.2RX版本，8.1R15.1之前的8.1RX版本。
solution:Upgrade pulsesecure pulse_connect_secure to a higher version than 8.1:r1.0,8.1:r1.1,8.1:r10.0,8.1:r11.0,8.1:r11.1,8.1:r12.0,8.1:r12.1,8.1:r13.0,8.1:r14.0,8.1:r2.0,8.1:r2.1,8.1:r3.0,8.1:r3.1,8.1:r3.2,8.1:r4.0,8.1:r4.1,8.1:r5.0,8.1:r6.0,8.1:r7.0,8.1:r8.0,8.1:r9.0,8.1:r9.1,8.1:r9.2,8.2:r1.0,8.2:r1.1,8.2:r10.0,8.2:r11.0,8.2:r12.0,8.2:r2.0,8.2:r3.0,8.2:r3.1,8.2:r4.0,8.2:r4.1,8.2:r5.0,8.2:r5.1,8.2:r6.0,8.2:r7.0,8.2:r7.1,8.2:r7.2,8.2:r8.0,8.2:r8.1,8.2:r8.2,8.2:r9.0,8.3:r1,8.3:r2,8.3:r2.1,8.3:r3,8.3:r4,8.3:r5,8.3:r5.1,8.3:r5.2,8.3:r6,8.3:r6.1,9.0:r1,9.0:r2,9.0:r2.1,9.0:r3,9.0:r3.1,9.0:r3.2,and avoid the version 8.1:r1.0,8.1:r1.1,8.1:r10.0,8.1:r11.0,8.1:r11.1,8.1:r12.0,8.1:r12.1,8.1:r13.0,8.1:r14.0,8.1:r2.0,8.1:r2.1,8.1:r3.0,8.1:r3.1,8.1:r3.2,8.1:r4.0,8.1:r4.1,8.1:r5.0,8.1:r6.0,8.1:r7.0,8.1:r8.0,8.1:r9.0,8.1:r9.1,8.1:r9.2,8.2:r1.0,8.2:r1.1,8.2:r10.0,8.2:r11.0,8.2:r12.0,8.2:r2.0,8.2:r3.0,8.2:r3.1,8.2:r4.0,8.2:r4.1,8.2:r5.0,8.2:r5.1,8.2:r6.0,8.2:r7.0,8.2:r7.1,8.2:r7.2,8.2:r8.0,8.2:r8.1,8.2:r8.2,8.2:r9.0,8.3:r1,8.3:r2,8.3:r2.1,8.3:r3,8.3:r4,8.3:r5,8.3:r5.1,8.3:r5.2,8.3:r6,8.3:r6.1,9.0:r1,9.0:r2,9.0:r2.1,9.0:r3,9.0:r3.1,9.0:r3.2