description: An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TOTP.
problem types: Improper Authentication - Generic (CWE-287)
affected:
{
product: Pulse Connect Secure
vendor: n/a
versions:
status: affected, version: Fixed in 9.1R8
}