NVD

Id
87819  
Name
CVE-2017-11193  
Description
Pulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the panel, the diag.cgi file is responsible for running commands such as ping, ping6, traceroute, traceroute6, nslookup, arp, and Portprobe. These functions do not have any protections against CSRF. That can allow an attacker to run these commands against any IP if they can get an admin to visit their malicious CSRF page.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-07-12  
Modified Date
2017-07-17  
Seq
2017-11193  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
423541 87819 CVE-2017-6195 http://ft.ipswitch.com/rs/751-HBN-596/images/Ipswitch-Security-Bulletin-FT-Vulnerability.pdf  View
423542 87819 CVE-2017-6195 https://www.siberas.de/assets/papers/ssa-1705_IPSWITCH_SQLinjection.txt  View
423543 87819 CVE-2017-6195 http://ft.ipswitch.com/rs/751-HBN-596/images/Ipswitch-Security-Bulletin-FT-Vulnerability.pdf  View
423544 87819 CVE-2017-6195 https://www.siberas.de/assets/papers/ssa-1705_IPSWITCH_SQLinjection.txt  View

Related JVN