VULNERABILITY INTELLIGENCE

CVE-2018-6374

CVSS score6.5 MEDIUM
EPSS probability0.62%
CISA KEVNot currently listed
Published2018-01-31
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Description

The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set.

Weakness classification

  • CWE-295: Improper Certificate Validation

Primary references