CVE-2018-6374: Medium severity PulseSecure Desktop Linux Client vulnerability
The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6374?
CVE-2018-6374 is considered a high severity vulnerability due to its potential to allow unauthorized manipulation of the Pulse Connection set.
How do I fix CVE-2018-6374?
To fix CVE-2018-6374, upgrade your Pulse Secure Desktop Linux Client to version PULSE5.2R9.2 or PULSE5.3R4.2 or later.
Which versions of Pulse Secure Desktop Linux clients are affected by CVE-2018-6374?
CVE-2018-6374 affects Pulse Secure Desktop Linux clients before versions PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2.
What are the consequences of the CVE-2018-6374 vulnerability?
The consequences of CVE-2018-6374 include potential interception and manipulation of data transmitted through the Pulse Secure connection.
Is there a workaround for CVE-2018-6374 while I upgrade my software?
There are no documented workarounds for CVE-2018-6374; upgrading to a secure version is the recommended solution.