CVE-2016-4787

EPSS 2.84%
Veröffentlicht 26.05.2016 14:59:03
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ivanti ≫ Connect Secure Version8.0

Ivanti ≫ Connect Secure Version8.2

Pulsesecure ≫ Pulse Connect Secure Version7.4

Ivanti ≫ Connect Secure Version8.1

Pulsesecure ≫ Pulse Connect Secure Version8.1r1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.84%	0.849

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	3.9	5.8	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:N/A:P

http://www.securitytracker.com/id/1035932

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40207

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-4787

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-4787

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-4787

EUVD