CVE-2018-16261: Medium severity pulsesecure pulse secure desktop client vulnerability
Published Sep 6, 2018
·Updated
In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dynamic Certificate Trust.
Affected Software
9 affected components
PulseSecure Pulse Secure Desktop Client Windows=5.3r1
PulseSecure Pulse Secure Desktop Client Windows=5.3r1.1
PulseSecure Pulse Secure Desktop Client Windows=5.3r2
PulseSecure Pulse Secure Desktop Client Windows=5.3r3
PulseSecure Pulse Secure Desktop Client Windows=5.3r4
PulseSecure Pulse Secure Desktop Client Windows=5.3r4.1
PulseSecure Pulse Secure Desktop Client Windows=5.3r4.2
PulseSecure Pulse Secure Desktop Client Windows=5.3rx
PulseSecure Pulse Secure Desktop Client Windows=9.0r1
Event History
Sep 6, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-16261?
CVE-2018-16261 is a Privilege Escalation Vulnerability with Dynamic Certificate Trust in Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1.
2
How severe is CVE-2018-16261?
CVE-2018-16261 has a severity rating of 6.8 (medium).
3
Which software versions are affected by CVE-2018-16261?
Pulse Secure Pulse Desktop Client versions 5.3RX before 5.3R5 and 9.0R1 are affected by CVE-2018-16261.
4
What is the Common Weakness Enumeration (CWE) of CVE-2018-16261?
CVE-2018-16261 is associated with CWE-295 (Improper Certificate Validation).
5
How can I fix CVE-2018-16261?
To address CVE-2018-16261, it is recommended to update Pulse Secure Pulse Desktop Client to version 5.3R5 or 9.0R1.