UpHeron
All vulnerabilities

Servers and applications

CVE-2019-11213

In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain unauthorized access as an end user, a related issue to CVE-2019-1573. (The endpoint would need to be already compromised for exploitation to succeed.) This affects Pulse Desktop Client 5.x before Secure Desktop 5.3R7 and Pulse Desktop Client 9.x…

Severity
High 8.1
Published
12 Apr 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.0r3
Exploit chance
2.8% in the next 30 daysHigher than 86% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Ivanti Connect SecureServers and applications · cpe:a:ivanti:connect_secure
  • From 9.0r1 before 9.0r3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-11213
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-11213