description: A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter.
problem types: Command Injection - Generic (CWE-77)
affected:
{
product: Pulse Connect Secure
vendor: n/a
versions:
status: affected, version: Fixed in 9.1R12
}