description: A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
problem types: Code Injection (CWE-94)
affected:
{
product: Pulse Connect Secure
vendor: n/a
versions:
status: affected, version: Fixed in 9.1R8
}