critical9.8
CVE-2018-20810
Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R2 and P…
Impact
Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX, PPS 5.2RX, or stand-alone devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Connect Secure | Version 8.3 |
| Pulsesecure | Pulse Policy Secure | Version 5.4 |