In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dynamic Certificate Trust.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pulse_secure_desktop_client | Pulsesecure | 5.3r1 (including) | 5.3r1 (including) |
| Pulse_secure_desktop_client | Pulsesecure | 5.3r1.1 (including) | 5.3r1.1 (including) |
| Pulse_secure_desktop_client | Pulsesecure | 5.3r2 (including) | 5.3r2 (including) |
| Pulse_secure_desktop_client | Pulsesecure | 5.3r3 (including) | 5.3r3 (including) |
| Pulse_secure_desktop_client | Pulsesecure | 5.3r4 (including) | 5.3r4 (including) |
| Pulse_secure_desktop_client | Pulsesecure | 5.3r4.1 (including) | 5.3r4.1 (including) |
| Pulse_secure_desktop_client | Pulsesecure | 5.3r4.2 (including) | 5.3r4.2 (including) |
| Pulse_secure_desktop_client | Pulsesecure | 5.3rx (including) | 5.3rx (including) |
| Pulse_secure_desktop_client | Pulsesecure | 9.0r1 (including) | 9.0r1 (including) |