Risk Scores
CVSS v3.0
8.600000381469727
CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:C/UI:N
EPSS Score
4.22%
88.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ivanti | connect_secure | 8.2, 7.1, 7.1 |
| n/a | n/a | n/a |
| pulsesecure | pulse_connect_secure | 7.4 |
Timeline
- CVE Published
- Aug 10, 2019 PoC Published
- Dec 2, 2019 PoC Published
- Feb 25, 2021 PoC Published
- Apr 14, 2021 EPSS Score
- Jul 29, 2021 PoC Published
- Aug 23, 2021 EPSS Score
- Dec 25, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 25, 2022 EPSS Score
- Apr 28, 2022 EPSS Score
- Aug 31, 2022 EPSS Score
References
- https://kb.pulsesecure.net/?atype=sa url
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/ url
- 108073 vdb
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010 url
- https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf url
- https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/ url
- VU#927237 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-11508 advisory
- https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study url
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 url