Insecure SSL Certificate Validation in Pulse Secure Desktop Linux Clients

CVE-2018-6374 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:P

The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set.

Learn more about our Cis Benchmark Audit For Desktop Software.