CVE:CVE-2018-7572
CNNVD:CNNVD-201809-620
Pulse Secure Client是美国Pulse Secure公司的一套用于访问Juniper Pulse Secure网关的终端设备的客户端软件。
Pulse Secure Client 9.0R1版本和5.3R5之前的5.3RX版本中存在安全漏洞。攻击者可利用该漏洞绕过Windows身份验证并以Pulse Secure Client权限在系统上执行命令。
solution:Upgrade pulsesecure pulse_secure_desktop to a higher version than 5.3r1.0,5.3r1.1,5.3r2.0,5.3r3.0,5.3r4.0,5.3r4.1,5.3r4.2,5.3rx,9.0r1.0,and avoid the version 5.3r1.0,5.3r1.1,5.3r2.0,5.3r3.0,5.3r4.0,5.3r4.1,5.3r4.2,5.3rx,9.0r1.0