FortiClient VulnerabilityPulse Secure CVE-2021-22893 Use After Free Vulnerability
Description
A critical authentication bypass vulnerability in Pulse Connect Secure. While no specific details about the flaw are available yet, it is likely that a remote, unauthenticated attacker could exploit this vulnerability by sending a specially crafted HTTP request to a vulnerable device. Successful exploitation of this vulnerability would grant an attacker the ability to execute arbitrary code on the Pulse Connect Secure Gateway.
Affected Applications
Pulse Secure
CVE References
CVE-2021-22893| ID | 2702 |
| Created | Apr 23, 2021 |
| Description Updated |
Oct 26, 2023 |
| Risk |
|
| Coverage | FortiClient |
| OS | Windows |
| Vendor | Pulse Secure |
| Patch | manual |
| Application | Pulse Secure |