CVE-2018-7572 — MEDIUM (6.8)

Vulnerability Description

Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can allow attackers to bypass Windows authentication and execute commands on the system with the privileges of Pulse Secure Client. The attacker must interrupt the client's network connectivity, and trigger a connection to a crafted proxy server with an invalid SSL certificate that allows certification-manager access, leading to the ability to browse local files and execute local programs.

CVSS Score

6.8

MEDIUM

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Pulsesecure	Pulse Secure Desktop	5.3r1.0

Related Weaknesses (CWE)

CWE-287

References

https://www.mdsec.co.uk/2018/09/advisory-cve-2018-7572-pulse-secure-client-autheThird Party Advisory
https://www.mdsec.co.uk/2018/09/advisory-cve-2018-7572-pulse-secure-client-autheThird Party Advisory

FAQ

What is CVE-2018-7572?

CVE-2018-7572 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can allow attackers to bypass Windows authentication and execute commands on the syste...

How severe is CVE-2018-7572?

CVE-2018-7572 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7572?

Check the references section above for vendor advisories and patch information. Affected products include: Pulsesecure Pulse Secure Desktop.