description: A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.
problem types: Code Injection (CWE-94)
affected:
{
product: Pulse Connect Secre
vendor: n/a
versions:
status: affected, version: Fixed in 9.1R8.2
}