CVE-2017-11196

Pulse Connect Secure 8.3R1 has CSRF in logout.cgi

published July 12, 2017

CVSS
—
EPSS
1%
Percentile
45.6
In the wild
Unconfirmed
What it is

Pulse Connect Secure 8.3R1 has CSRF in logout.cgi. The logout function of the admin panel is not protected by any CSRF tokens, thus allowing an attacker to logout a user by making them visit a malicious web page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00560 · 45.6th percentile
Published
2017-07-12T20:00Z
EPSS history
Timeline
  • 12 JUL 20:00Z
    Pulse Connect Secure 8.3R1 has CSRF in logout.cgi
    cvelistv5