CVE-2016-4787: Critical severity ivanti pulse connect secure vulnerability
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4787?
CVE-2016-4787 has a high severity rating due to its potential to allow remote attackers to read sensitive authentication files.
How do I fix CVE-2016-4787?
To fix CVE-2016-4787, upgrade to Pulse Connect Secure version 8.2r1, 8.1r2, 8.0r10, or 7.4r13.4 or later.
Which versions of Pulse Connect Secure are affected by CVE-2016-4787?
CVE-2016-4787 affects versions 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4.
What types of attacks are possible with CVE-2016-4787?
CVE-2016-4787 allows remote attackers to exploit the vulnerability to read sensitive system authentication files.
Is there a patch available for CVE-2016-4787?
Yes, a patch is available by upgrading to the specified affected versions for Pulse Connect Secure.