CVE-2016-4791: SSRF
The administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forgery (SSRF) attacks via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4791?
CVE-2016-4791 is classified as a high severity vulnerability that allows unauthorized file access and potential SSRF attacks.
How do I fix CVE-2016-4791?
To remediate CVE-2016-4791, update your Pulse Connect Secure appliance to the latest version as specified by the vendor.
What systems are affected by CVE-2016-4791?
CVE-2016-4791 affects Pulse Connect Secure versions 7.4, 8.0, 8.1, and 8.2 prior to their respective fixed releases.
What types of attacks can be conducted due to CVE-2016-4791?
CVE-2016-4791 allows remote administrators to enumerate files, read arbitrary files, and perform server side request forgery (SSRF) attacks.
Is CVE-2016-4791 exploitable remotely?
Yes, CVE-2016-4791 can be exploited by remote attackers with access to the administrative user interface.