CVE-2018-11002 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.5 MEDIUM	LOCAL	LOW	NONE	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 31%

Vendor	Product	Version
pulsesecure	pulse_secure_desktop_client	5.3r1:r1
pulsesecure	pulse_secure_desktop_client	5.3r1.1:r1.1
pulsesecure	pulse_secure_desktop_client	5.3r2:r2
pulsesecure	pulse_secure_desktop_client	5.3r3:r3
pulsesecure	pulse_secure_desktop_client	5.3r4:r4
pulsesecure	pulse_secure_desktop_client	5.3r4.1:r4.1
pulsesecure	pulse_secure_desktop_client	5.3r4.2:r4.2
pulsesecure	pulse_secure_desktop_client	5.3r5:r5
pulsesecure	pulse_secure_desktop_client	5.3r5.2:r5.2
pulsesecure	pulse_secure_desktop_client	5.3r6:r6

𝑥

= Vulnerable software versions

Known Exploits!

Common Weakness Enumeration

CWE-732 - Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References

http://www.securityfocus.com/bid/106054

https://www.themissinglink.com.au/security-advisories-cve-2017-16878-0

http://www.securityfocus.com/bid/106054

https://www.themissinglink.com.au/security-advisories-cve-2017-16878-0