description: A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature
problem types: Command Injection - Generic (CWE-77)
affected:
{
product: Pulse Connect Secure
vendor: n/a
versions:
status: affected, version: Fixed in 9.1R11.4
}