CVE-2018-20808: XSS
Published Mar 16, 2019
·Updated
An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not applicable to 8.1RX.
Affected Software
6 affected components
PulseSecure Pulse Connect Secure=8.3-r1
PulseSecure Pulse Connect Secure=8.3-r2
PulseSecure Pulse Connect Secure=8.3-r2.1
Ivanti Connect Secure=8.3-r1
Ivanti Connect Secure=8.3-r2
Ivanti Connect Secure=8.3-r2.1
Event History
Mar 16, 2019
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20808?
The severity of CVE-2018-20808 is medium.
2
What is the affected software for CVE-2018-20808?
The affected software for CVE-2018-20808 is Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3.
3
How does CVE-2018-20808 impact Pulse Secure Pulse Connect Secure?
CVE-2018-20808 impacts Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization, allowing for an XSS issue.
4
How can I fix CVE-2018-20808?
To fix CVE-2018-20808, you should update Pulse Secure Pulse Connect Secure to version 8.3R3 or later.
5
Where can I find more information about CVE-2018-20808?
You can find more information about CVE-2018-20808 at the following link: [Pulse Secure Security Advisory](https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/).