CVE-2016-4791: SSRF
First published: Thu May 26 2016(Updated: )
The administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forgery (SSRF) attacks via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pulse Secure Pulse Connect Secure | =8.1 | |
| Pulse Secure Pulse Connect Secure | =8.1r1.0 | |
| Pulse Secure Pulse Connect Secure | =8.2 | |
| Pulse Secure Pulse Connect Secure | =8.0 | |
| Pulse Secure Pulse Connect Secure | =7.4 | |
| Ivanti Connect Secure (ICS) VPN | =8.1 | |
| Ivanti Connect Secure (ICS) VPN | =8.2 | |
| Ivanti Connect Secure (ICS) VPN | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-4791?
CVE-2016-4791 is classified as a high severity vulnerability that allows unauthorized file access and potential SSRF attacks.
How do I fix CVE-2016-4791?
To remediate CVE-2016-4791, update your Pulse Connect Secure appliance to the latest version as specified by the vendor.
What systems are affected by CVE-2016-4791?
CVE-2016-4791 affects Pulse Connect Secure versions 7.4, 8.0, 8.1, and 8.2 prior to their respective fixed releases.
What types of attacks can be conducted due to CVE-2016-4791?
CVE-2016-4791 allows remote administrators to enumerate files, read arbitrary files, and perform server side request forgery (SSRF) attacks.
Is CVE-2016-4791 exploitable remotely?
Yes, CVE-2016-4791 can be exploited by remote attackers with access to the administrative user interface.
- agent/references
- agent/type
- agent/weakness
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/author
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/pulsesecure
- canonical/pulse secure pulse connect secure
- version/pulse secure pulse connect secure/8.1
- version/pulse secure pulse connect secure/8.1r1.0
- version/pulse secure pulse connect secure/8.2
- version/pulse secure pulse connect secure/8.0
- version/pulse secure pulse connect secure/7.4
- vendor/ivanti
- canonical/ivanti connect secure (ics) vpn
- version/ivanti connect secure (ics) vpn/8.1
- version/ivanti connect secure (ics) vpn/8.2
- version/ivanti connect secure (ics) vpn/8.0