description: A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
problem types: Code Injection (CWE-94)
affected:
{
product: Pulse Secure Secure
vendor: n/a
versions:
status: affected, version: Fixed in 9.1R11.4
}