High severity · published Aug 29, 2017
CVE-2017-11455
diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8, and 5.1R1 through 5.1R10 allow remote…
8.8
CVSS
1.3%
EPSS
No
On KEV
Description
diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8, and 5.1R1 through 5.1R10 allow remote attackers to hijack the authentication of administrators for requests to start tcpdump, related to the lack of anti-CSRF tokens.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Connect Secure · Ivanti
8.1 · source: NVD
PC
Pulse Connect Secure · Pulsesecure
8.1r1.0; 8.2r1.0; 8.2r1.1; 8.2r2.0; 8.2r3.0; 8.2r3.1; +3 more · source: NVD
PP
Pulse Policy Secure · Pulsesecure
5.1r1.0; 5.1r1.1; 5.1r2.0; 5.1r2.1; 5.1r3.0; 5.1r3.2; +31 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-11455
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-11455
Third Party Advisory
http://www.securityfocus.com/bid/100530
Third Party Advisory
http://www.securitytracker.com/id/1039242
Vendor Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40793
More from Connect Secure
10.0
CVE-2021-22893
Ivanti Pulse Connect Secure Use-After-Free Vulnerability
10.0
CVE-2019-11510
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
9.8
CVE-2025-22457
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
9.1
CVE-2024-21887
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
9.0
CVE-2025-0282
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability