High severity7.7NVD Advisory· Published Apr 26, 2019· Updated Jun 17, 2026
CVE-2019-11538
CVE-2019-11538
Description
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1, an NFS problem could allow an authenticated attacker to access the contents of arbitrary files on the affected device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
60cpe:2.3:a:ivanti:connect_secure:8.1:r1.0:*:*:*:*:*:*+ 58 more
- cpe:2.3:a:ivanti:connect_secure:8.1:r1.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r1.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r10.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r11.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r11.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r12.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r12.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r13.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r14.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r2.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r2.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r3.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r3.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r3.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r4.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r4.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r5.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r6.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r7.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r8.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r9.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r9.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.1:r9.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r1.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r1.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r10.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r11.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r12.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r2.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r3.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r3.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r4.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r4.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r5.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r5.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r6.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r7.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r7.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r7.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r8.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r8.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r8.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.2:r9.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r4:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r5.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r5.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r5:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r6.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r6:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r3.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r3.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r3:*:*:*:*:*:*
- Range: <9.0R3.4, <8.3R7.1, <8.2R12.1, <8.1R15.1
Patches
Vulnerability mechanics
References
6- devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/nvdExploitThird Party Advisory
- i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdfnvdExploitThird Party Advisory
- www.securityfocus.com/bid/108073nvdThird Party AdvisoryVDB Entry
- kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101nvdVendor Advisory
- psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010nvdThird Party Advisory
- www.kb.cert.org/vuls/id/927237nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.