VYPR
← All advisories
High severity7.5NVD Advisory· Published May 14, 2021· Updated Jun 17, 2026

CVE-2021-31922

CVE-2021-31922

Description

An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to smuggle an HTTP request through an HTTP/2 Header. This vulnerability is resolved in 21.1, 20.3R1, 20.2R1, 20.1R2, 19.2R4, and 18.2R3.

Affected products

12
  • Pulsesecure/Virtual Traffic Manager11 versions
    cpe:2.3:a:pulsesecure:virtual_traffic_manager:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:pulsesecure:virtual_traffic_manager:*:*:*:*:*:*:*:*range: <=18.1
    • cpe:2.3:a:pulsesecure:virtual_traffic_manager:18.2:-:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:virtual_traffic_manager:18.2:r1:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:virtual_traffic_manager:19.2:-:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:virtual_traffic_manager:19.2:r1:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:virtual_traffic_manager:19.2:r2:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:virtual_traffic_manager:19.3:*:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:virtual_traffic_manager:20.1:-:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:virtual_traffic_manager:20.2:-:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:virtual_traffic_manager:20.3:-:*:*:*:*:*:*
    • (no CPE)range: <21.1
  • Pulse Secure/Virtual Traffic Managerdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.