description: A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive uploaded in the administrator web interface.
problem types: Unrestricted Upload of File with Dangerous Type (CWE-434)
affected:
{
product: Pulse Connect Secure
vendor: n/a
versions:
status: affected, version: Fixed in 9.1R12
}