Forum Discussion
Pulse Secure Releases Patches for Recent Zero-Day...
Pulse Secure Releases Patches for Recent Zero-Day Vulnerability (CVE-2021-22893)
On May 3, Pulse Secure updated its out-of-cycle advisory (SA44784) regarding a recently disclosed critical vulnerability in its Pulse Connect Secure (PCS) appliance.
The Pulse Secure advisory was originally published on April 20. In it, they announced that CVE-2021-22893, an authentication bypass vulnerability, had been exploited in the wild as a zero-day. At that time, no patch was available for the flaw, though Pulse Secure did say they planned to release a fix in early May.
As part of the patch to address CVE-2021-22893, Pulse Secure also fixed three additional vulnerabilities in Pulse Connect Secure:
For more information about these vulnerabilities, including the availability of patches and Tenable product coverage, please visit our blog.
