Vulnerability Description
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before 7.4r13.4 allow remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | Connect Secure | 8.1 |
| Pulsesecure | Pulse Connect Secure | 8.1r1.0 |
References
- http://www.securitytracker.com/id/1035932
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40206Vendor Advisory
- http://www.securitytracker.com/id/1035932
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40206Vendor Advisory
FAQ
What is CVE-2016-4786?
CVE-2016-4786 is a vulnerability with a CVSS score of 7.5 (HIGH). Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before 7.4r13.4 allow remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
How severe is CVE-2016-4786?
CVE-2016-4786 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-4786?
Check the references section above for vendor advisories and patch information. Affected products include: Ivanti Connect Secure, Pulsesecure Pulse Connect Secure.