CVE-2016-4787
First published: Thu May 26 2016(Updated: )
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ivanti Connect Secure (ICS) VPN | =8.0 | |
| Ivanti Connect Secure (ICS) VPN | =8.2 | |
| Pulse Secure Pulse Connect Secure | =7.4 | |
| Ivanti Connect Secure (ICS) VPN | =8.1 | |
| Pulse Secure Pulse Connect Secure | =8.1r1.0 | |
| Pulse Secure Pulse Connect Secure | =8.0 | |
| Pulse Secure Pulse Connect Secure | =8.2 | |
| Pulse Secure Pulse Connect Secure | =8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-4787?
CVE-2016-4787 has a high severity rating due to its potential to allow remote attackers to read sensitive authentication files.
How do I fix CVE-2016-4787?
To fix CVE-2016-4787, upgrade to Pulse Connect Secure version 8.2r1, 8.1r2, 8.0r10, or 7.4r13.4 or later.
Which versions of Pulse Connect Secure are affected by CVE-2016-4787?
CVE-2016-4787 affects versions 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4.
What types of attacks are possible with CVE-2016-4787?
CVE-2016-4787 allows remote attackers to exploit the vulnerability to read sensitive system authentication files.
Is there a patch available for CVE-2016-4787?
Yes, a patch is available by upgrading to the specified affected versions for Pulse Connect Secure.
- agent/references
- agent/type
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/author
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ivanti
- canonical/ivanti connect secure (ics) vpn
- version/ivanti connect secure (ics) vpn/8.0
- version/ivanti connect secure (ics) vpn/8.2
- vendor/pulsesecure
- canonical/pulse secure pulse connect secure
- version/pulse secure pulse connect secure/7.4
- version/ivanti connect secure (ics) vpn/8.1
- version/pulse secure pulse connect secure/8.1r1.0
- version/pulse secure pulse connect secure/8.0
- version/pulse secure pulse connect secure/8.2
- version/pulse secure pulse connect secure/8.1