CVE-2021-22935
Assigner: hackerone
Published: 2021-08-16T18:38:49
State: PUBLISHED
affected: product: Pulse Connect Secure
vendor: n/a
versions: status: affected
version: Fixed in 9.1R12
descriptions: value: A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter.
problemTypes: descriptions: cweId: CWE-77
description: Command Injection - Generic (CWE-77)
type: CWE