Source |
The Hacker News |
Identifiant |
2834601 |
Date de publication |
2021-05-25 00:37:19 (vue: 2021-05-25 08:05:50) |
Titre |
New High-Severity Vulnerability Reported in Pulse Connect Secure VPN |
Texte |
Ivanti, the company behind Pulse Secure VPN appliances, has published a security advisory for a high severity vulnerability that may allow an authenticated remote attacker to execute arbitrary code with elevated privileges.
"Buffer Overflow in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user," |
Notes |
|
Envoyé |
Oui |
Condensat |
advisory allow allows appliances arbitrary attacker authenticated behind browse buffer code company connect elevated execute file has high ivanti may new overflow privileges profiles published pulse remote reported resource root secure security severity shares smb user vpn vulnerability windows |
Tags |
Vulnerability
|
Stories |
|
Move |
|