CVE-2021-22965 - Vulnerability Details

Vendors	Products
Ivanti	Connect Secure
Pulsesecure	Pulse Connect Secure

Link	Providers
https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Pulse Connect Secure", "vendor": "n/a", "versions": [{"status": "affected", "version": "Fixed in 9.1R12.1"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "description": "Denial of Service (CWE-400)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-11-19T18:10:38", "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "support@hackerone.com", "ID": "CVE-2021-22965", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Pulse Connect Secure", "version": {"version_data": [{"version_value": "Fixed in 9.1R12.1"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Denial of Service (CWE-400)"}]}]}, "references": {"reference_data": [{"name": "https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF", "refsource": "MISC", "url": "https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T18:58:26.149Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF"}]}]}, "cveMetadata": {"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "assignerShortName": "hackerone", "cveId": "CVE-2021-22965", "datePublished": "2021-11-19T18:10:38", "dateReserved": "2021-01-06T00:00:00", "dateUpdated": "2024-08-03T18:58:26.149Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Pulse Connect Secure (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : Fixed in 9.1R12.1 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-400 (string)

description : Denial of Service (CWE-400) (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2021-11-19T18:10:38 (string)

orgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

shortName : hackerone (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : support@hackerone.com (string)

ID : CVE-2021-22965 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Pulse Connect Secure (string)

version : { »

version_data : [ »

0 : { »

version_value : Fixed in 9.1R12.1 (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Denial of Service (CWE-400) (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF (string)

refsource : MISC (string)

url : https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T18:58:26.149Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

assignerShortName : hackerone (string)

cveId : CVE-2021-22965 (string)

datePublished : 2021-11-19T18:10:38 (string)

dateReserved : 2021-01-06T00:00:00 (string)

dateUpdated : 2024-08-03T18:58:26.149Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*", "matchCriteriaId": "4F450898-0B06-4073-9B76-BF22F68BD14F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*", "matchCriteriaId": "4B21C181-DC49-4EBD-9932-DBB337151FF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:*", "matchCriteriaId": "5AA4B39F-2FB9-4752-B1F1-18812B0990B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r10.2:*:*:*:*:*:*", "matchCriteriaId": "232BAB6C-D318-4F80-8F49-4E700C21F535", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*", "matchCriteriaId": "ABD840BF-944E-4F4C-96DC-0256286338F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r11.1:*:*:*:*:*:*", "matchCriteriaId": "A1995F34-AE75-47C4-9A9D-DBB1D3E130E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:*", "matchCriteriaId": "366EF5B8-0233-49B8-806A-E54F60410ADE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r11.4:*:*:*:*:*:*", "matchCriteriaId": "6F2A7F5C-1D78-4D19-B8ED-5822FDF5DA63", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r12:*:*:*:*:*:*", "matchCriteriaId": "32E0B425-A9BA-4D00-84A9-46268072D696", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*", "matchCriteriaId": "4FEFC4B1-7350-46F9-80C1-42F5AE06142F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*", "matchCriteriaId": "DB7A6D62-6576-4713-9BF4-11068A72E8B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*", "matchCriteriaId": "843BC1B9-50CC-4F8F-A454-A0CEC6E92290", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*", "matchCriteriaId": "D5355372-03EA-46D7-9104-A2785C29B664", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*", "matchCriteriaId": "3DE32A0C-8944-4F51-A286-266055CA4B2F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*", "matchCriteriaId": "0349A0CC-A372-4E51-899E-D7BA67876F4B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*", "matchCriteriaId": "93D1A098-BD77-4A7B-9070-A764FB435981", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*", "matchCriteriaId": "3CCC2D7B-F835-45EC-A316-2F0C5F2CF565", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*", "matchCriteriaId": "AD812596-C77C-4129-982F-C22A25B52126", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:*", "matchCriteriaId": "9FA0B20D-3FA1-42AE-BDC5-93D8A182927C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:*", "matchCriteriaId": "BFFA0B02-7F6D-4434-B1E7-EB8520FD68A0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:*", "matchCriteriaId": "DFE8FA87-9622-4D5B-99C7-D8EE230C0AA9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r8.4:*:*:*:*:*:*", "matchCriteriaId": "07AB853D-5A3F-4142-8417-1C9FB729A89E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:*", "matchCriteriaId": "16DAA769-8F0D-4C54-A8D9-9902995605B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:*", "matchCriteriaId": "B2C10C89-1DBC-4E91-BD28-D5097B589CA9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r9.2:*:*:*:*:*:*", "matchCriteriaId": "F54753D0-6275-4F82-B874-55438D2983B3", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*", "matchCriteriaId": "43AF1D62-D827-4495-A4B0-CCA0C2BEE68F", "versionEndExcluding": "9.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device."}, {"lang": "es", "value": "Una vulnerabilidad en Pulse Connect Secure versiones anteriores a 9.1R12.1, podr\u00eda permitir a un administrador no autenticado causar una denegaci\u00f3n de servicio cuando es enviada una petici\u00f3n malformada al dispositivo"}], "id": "CVE-2021-22965", "lastModified": "2024-11-21T05:51:02.120", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-11-19T19:15:08.263", "references": [{"source": "support@hackerone.com", "tags": ["Vendor Advisory"], "url": "https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "support@hackerone.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-400"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:* (string)

matchCriteriaId : 4F450898-0B06-4073-9B76-BF22F68BD14F (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:* (string)

matchCriteriaId : 4B21C181-DC49-4EBD-9932-DBB337151FF7 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:* (string)

matchCriteriaId : 5AA4B39F-2FB9-4752-B1F1-18812B0990B4 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r10.2:*:*:*:*:*:* (string)

matchCriteriaId : 232BAB6C-D318-4F80-8F49-4E700C21F535 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:* (string)

matchCriteriaId : ABD840BF-944E-4F4C-96DC-0256286338F6 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r11.1:*:*:*:*:*:* (string)

matchCriteriaId : A1995F34-AE75-47C4-9A9D-DBB1D3E130E5 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:* (string)

matchCriteriaId : 366EF5B8-0233-49B8-806A-E54F60410ADE (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r11.4:*:*:*:*:*:* (string)

matchCriteriaId : 6F2A7F5C-1D78-4D19-B8ED-5822FDF5DA63 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r12:*:*:*:*:*:* (string)

matchCriteriaId : 32E0B425-A9BA-4D00-84A9-46268072D696 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:* (string)

matchCriteriaId : 4FEFC4B1-7350-46F9-80C1-42F5AE06142F (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:* (string)

matchCriteriaId : DB7A6D62-6576-4713-9BF4-11068A72E8B7 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:* (string)

matchCriteriaId : 843BC1B9-50CC-4F8F-A454-A0CEC6E92290 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:* (string)

matchCriteriaId : D5355372-03EA-46D7-9104-A2785C29B664 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:* (string)

matchCriteriaId : 3DE32A0C-8944-4F51-A286-266055CA4B2F (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:* (string)

matchCriteriaId : 0349A0CC-A372-4E51-899E-D7BA67876F4B (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:* (string)

matchCriteriaId : 93D1A098-BD77-4A7B-9070-A764FB435981 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:* (string)

matchCriteriaId : 3CCC2D7B-F835-45EC-A316-2F0C5F2CF565 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:* (string)

matchCriteriaId : AD812596-C77C-4129-982F-C22A25B52126 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:* (string)

matchCriteriaId : 9FA0B20D-3FA1-42AE-BDC5-93D8A182927C (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:* (string)

matchCriteriaId : BFFA0B02-7F6D-4434-B1E7-EB8520FD68A0 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:* (string)

matchCriteriaId : DFE8FA87-9622-4D5B-99C7-D8EE230C0AA9 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r8.4:*:*:*:*:*:* (string)

matchCriteriaId : 07AB853D-5A3F-4142-8417-1C9FB729A89E (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:* (string)

matchCriteriaId : 16DAA769-8F0D-4C54-A8D9-9902995605B0 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:* (string)

matchCriteriaId : B2C10C89-1DBC-4E91-BD28-D5097B589CA9 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r9.2:*:*:*:*:*:* (string)

matchCriteriaId : F54753D0-6275-4F82-B874-55438D2983B3 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 43AF1D62-D827-4495-A4B0-CCA0C2BEE68F (string)

versionEndExcluding : 9.1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad en Pulse Connect Secure versiones anteriores a 9.1R12.1, podría permitir a un administrador no autenticado causar una denegación de servicio cuando es enviada una petición malformada al dispositivo (string)

}

]

id : CVE-2021-22965 (string)

lastModified : 2024-11-21T05:51:02.120 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 7.8 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:N/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-11-19T19:15:08.263 (string)

references : [ »

0 : { »

source : support@hackerone.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF (string)

}

]

sourceIdentifier : support@hackerone.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-400 (string)

}

]

source : support@hackerone.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-400 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object