CVE:CVE-2021-22935
CNNVD:CNNVD-202108-452
Pulse Secure Pulse Connect Secure（又名PCS，前称Juniper Junos Pulse）是美国Pulse Secure公司的一套SSL VPN解决方案。
Pulse Secure Pulse Connect Secure 中存在命令注入漏洞，该漏洞源于产品未能过滤输入数据的特殊字符。攻击者可通过发送特制的HTTP请求在目标系统执行Shell命令。
solution:Upgrade pulsesecure pulse_connect_secure to a higher version than 9.1,9.1,9.1:r1.0,9.1:r10.0,9.1:r11.0,9.1:r2.0,9.1:r3.0,9.1:r4.0,9.1:r5.0,9.1:r6.0,9.1:r7.0,9.1:r8.0,9.1:r9.0,and avoid the version (,9.1),9.1,9.1:r1.0,9.1:r10.0,9.1:r11.0,9.1:r2.0,9.1:r3.0,9.1:r4.0,9.1:r5.0,9.1:r6.0,9.1:r7.0,9.1:r8.0,9.1:r9.0