Pulse Secure Desktop Client Pulse Secure Desktop Client

stack.watch can notify you when security vulnerabilities are reported in Pulse Secure Desktop Client. You can add multiple products that you use with Pulse Secure Desktop Client to create your own personal software stack watcher.

By the Year

In 2020 there have been 0 vulnerabilities in Pulse Secure Desktop Client . Last year Pulse Secure Desktop Client had 2 security vulnerabilities published. Right now, Pulse Secure Desktop Client is on track to have less security vulerabilities in 2020 than it did last year.

Year Vulnerabilities Average Score
2020 0 0.00
2019 2 7.80
2018 5 6.18

It may take a day or so for new Pulse Secure Desktop Client vulnerabilities to show up. Additionally vulnerabilities may be tagged under a different product or component name.

Latest Pulse Secure Desktop Client Security Vulnerabilities

An information exposure issue where IPv6 DNS traffic

CVE-2018-20812 7.5 - High - June 28, 2019

An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel (when Traffic Enforcement was enabled) exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack (IPv4/IPv6) endpoints.

CVE-2018-20812 is exploitable with network access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Information Leak

In Pulse Secure Pulse Desktop Client and Network Connect

CVE-2019-11213 8.1 - High - April 12, 2019

In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain unauthorized access as an end user, a related issue to CVE-2019-1573. (The endpoint would need to be already compromised for exploitation to succeed.) This affects Pulse Desktop Client 5.x before Secure Desktop 5.3R7 and Pulse Desktop Client 9.x before Secure Desktop 9.0R3. It also affects (for Network Connect customers) Pulse Connect Secure 8.1 before 8.1R14, 8.3 before 8.3R7, and 9.0 before 9.0R3.

CVE-2019-11213 can be explotited with network access, and does not require authorization privledges or user interaction. This vulnerability is consided to have a high level of attack complexity. It has an exploitability score of 2.2 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

384

Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions.

CVE-2018-11002 5.5 - Medium - November 29, 2018

Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions.

CVE-2018-11002 is exploitable with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.

DLL preloading

The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability.

CVE-2018-15865 7.8 - High - September 06, 2018

The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability.

CVE-2018-15865 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability.

CVE-2018-15726 5.3 - Medium - September 06, 2018

The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability.

CVE-2018-15726 is exploitable with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Shell injection

The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability.

CVE-2018-15749 5.5 - Medium - September 06, 2018

The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability.

CVE-2018-15749 can be explotited with local system access, and requires small amount of user privledges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Uncontrolled Format String

In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1

CVE-2018-16261 6.8 - Medium - September 06, 2018

In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dynamic Certificate Trust.

CVE-2018-16261 can be explotited with physical access, and does not require authorization privledges or user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 0.9 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

Improper Certificate Validation