CVE:CVE-2018-20812
CNNVD:CNNVD-201906-1115
Pulse Secure Pulse Desktop Client是美国Pulse Secure公司的一套用于访问Juniper Pulse Secure网关的终端设备的客户端软件。
Pulse Secure Pulse Secure Desktop 9.0R1及之前版本中存在信息泄露漏洞。该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。
solution:Upgrade pulsesecure pulse_secure_desktop_client to a higher version than 4.0:r1.0,4.0:r10.0,4.0:r11.0,4.0:r11.1,4.0:r12.0,4.0:r13.0,4.0:r2.0,4.0:r3.0,4.0:r4.0,4.0:r5.0,4.0:r6.0,4.0:r7.0,4.0:r8.0,4.0:r9.0,4.0:r9.1,4.0:r9.2,5.1:r1.0,5.1:r1.1,5.1:r10.0,5.1:r11.0,5.1:r11.1,5.1:r12.0,5.1:r13.0,5.1:r14.0,5.1:r2.0,5.1:r3.0,5.1:r3.1,5.1:r4.0,5.1:r5.1,5.1:r6.0,5.1:r7.0,5.1:r8.0,5.1:r9.0,5.1:r9.1,5.1r:3.2,5.1r:5.0,5.3:r1,5.3:r1.1,5.3:r2,5.3:r3,5.3:r4,5.3:r4.1,5.3:r4.2,5.3:r5,5.3:r5.2,5.3:r6,5.3:r7,9.0:r1,9.0:r2,9.0:r2.1,9.0:r3,9.0:r3.2,9.0:r4,and avoid the version 4.0:r1.0,4.0:r10.0,4.0:r11.0,4.0:r11.1,4.0:r12.0,4.0:r13.0,4.0:r2.0,4.0:r3.0,4.0:r4.0,4.0:r5.0,4.0:r6.0,4.0:r7.0,4.0:r8.0,4.0:r9.0,4.0:r9.1,4.0:r9.2,5.1:r1.0,5.1:r1.1,5.1:r10.0,5.1:r11.0,5.1:r11.1,5.1:r12.0,5.1:r13.0,5.1:r14.0,5.1:r2.0,5.1:r3.0,5.1:r3.1,5.1:r4.0,5.1:r5.1,5.1:r6.0,5.1:r7.0,5.1:r8.0,5.1:r9.0,5.1:r9.1,5.1r:3.2,5.1r:5.0,5.3:r1,5.3:r1.1,5.3:r2,5.3:r3,5.3:r4,5.3:r4.1,5.3:r4.2,5.3:r5,5.3:r5.2,5.3:r6,5.3:r7,9.0:r1,9.0:r2,9.0:r2.1,9.0:r3,9.0:r3.2,9.0:r4