CVE-2019-11539 · Sandworm Watch

Nov 3, 2021high

CVE-2019-11539: Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands. Required action: Apply updates per vendor instructions.

CVE-2019-11539EPSS 98.6%IvantiPulse Connect Secure and Pulse Policy Secure

CISA KEV ↗ · unattributed attribution