VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Apr 12, 2016· Updated Jun 17, 2026

CVE-2016-3985

CVE-2016-3985

Description

The Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse Connect Secure (aka PCS) 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors.

Affected products

3
  • Pulsesecure/Pulse Connect Secure3 versions
    cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r7:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r7:*:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r1:*:*:*:*:*:*:*
    • (no CPE)range: 8.1R7, 8.2R1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.