CVE-2018-15726: OS Command Injection

Published Sep 6, 2018

Updated

The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability.

Affected Software

9 affected components

PulseSecure Pulse Secure Desktop Client Macos=5.3r1

PulseSecure Pulse Secure Desktop Client Macos=5.3r1.1

PulseSecure Pulse Secure Desktop Client Macos=5.3r2

PulseSecure Pulse Secure Desktop Client Macos=5.3r3

PulseSecure Pulse Secure Desktop Client Macos=5.3r4

PulseSecure Pulse Secure Desktop Client Macos=5.3r4.1

PulseSecure Pulse Secure Desktop Client Macos=5.3r4.2

PulseSecure Pulse Secure Desktop Client Mac Os X=5.3rx

PulseSecure Pulse Secure Desktop Client Macos=9.0r1

Event History

Sep 6, 2018

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is CVE-2018-15726?

CVE-2018-15726 is a Privilege Escalation Vulnerability in the Pulse Secure Desktop (macOS) version 5.3RX before 5.3R5 and 9.0R1.

What software versions are affected by CVE-2018-15726?

The affected software versions are Pulse Secure Desktop Client versions 5.3R1 to 5.3R4.2 and 5.3RX, as well as version 9.0R1.

What is the severity of CVE-2018-15726?

CVE-2018-15726 has a severity rating of 5.3, which is categorized as medium.

How can I fix the Privilege Escalation Vulnerability?

To fix the Privilege Escalation Vulnerability, update your Pulse Secure Desktop Client to version 5.3R5 or 9.0R1.

Where can I find more information about CVE-2018-15726?

You can find more information about CVE-2018-15726 in the Pulse Secure Security Advisories at the following link: [Pulse Secure Security Advisories](https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877)