CVE-2018-6374

medium

Description

The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-18131

http://www.securityfocus.com/bid/102908

http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43620

Details

Source: Mitre, NVD

Published: 2018-01-31

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L