High severity · published Apr 12, 2019
CVE-2019-11213
In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain unauthorized access as an end…
8.1
CVSS
2.8%
EPSS
No
On KEV
Description
In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain unauthorized access as an end user, a related issue to CVE-2019-1573. (The endpoint would need to be already compromised for exploitation to succeed.) This affects Pulse Desktop Client 5.x before Secure Desktop 5.3R7 and Pulse Desktop Client 9.x before Secure Desktop 9.0R3. It also affects (for Network Connect customers) Pulse Connect Secure 8.1 before 8.1R14, 8.3 before 8.3R7, and 9.0 before 9.0R3.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Connect Secure · Ivanti
9.0r1 before 9.0r3 · source: NVD
PC
Pulse Connect Secure · Pulsesecure
8.1r1.0 through 8.1r14.0; 8.3r1 before 8.3r7 · source: NVD
PS
Pulse Secure Desktop Client · Pulsesecure
5.0r1.0 before 5.3r7; 9.0r1 before 9.0r3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-11213
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-11213
Vendor Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44114
Vendor Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44114/
Third Party Advisory
https://www.kb.cert.org/vuls/id/192371
More from Connect Secure
10.0
CVE-2021-22893
Ivanti Pulse Connect Secure Use-After-Free Vulnerability
10.0
CVE-2019-11510
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
9.8
CVE-2025-22457
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
9.1
CVE-2024-21887
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
9.0
CVE-2025-0282
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability