CVE-2019-11539

KEV · Ransomware

Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

View CVE record →

Vendor / Project: Ivanti
Product: Pulse Connect Secure and Pulse Policy Secure
Date added: Nov 3, 2021
Due date: May 3, 2022
Known ransomware use: Known
CWEs: CWE-78

Description

Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-11539