CVE-2021-22936 - Vulnerability Details - OpenCVE

A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized web parameter.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00125.

Key SSVC decision points have not yet been added.

Vendors	Products
Ivanti	Connect Secure
Pulsesecure	Pulse Connect Secure

Configuration 1 [-]

OR	cpe:2.3:a:ivanti:connect_secure:9.1:-::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r1.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r10.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r11.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r2.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r3.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r4.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r5.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r6.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r7.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r8.0::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r9.0::::::
	cpe:2.3:a:pulsesecure:pulse_connect_secure::::::::

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC

History

No history.

MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2021-08-16T18:38:52

Updated: 2024-08-03T18:58:25.950Z

Reserved: 2021-01-06T00:00:00

Link: CVE-2021-22936

Vulnrichment

No data.

NVD

Status : Modified

Published: 2021-08-16T19:15:13.627

Modified: 2024-11-21T05:50:58.300

Link: CVE-2021-22936

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "Pulse Connect Secure", "vendor": "n/a", "versions": [{"status": "affected", "version": "Fixed in 9.1R12"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized web parameter."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "Cross-site Scripting (XSS) - Reflected (CWE-79)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-08-16T18:38:52", "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "support@hackerone.com", "ID": "CVE-2021-22936", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Pulse Connect Secure", "version": {"version_data": [{"version_value": "Fixed in 9.1R12"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized web parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Cross-site Scripting (XSS) - Reflected (CWE-79)"}]}]}, "references": {"reference_data": [{"name": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC", "refsource": "MISC", "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T18:58:25.950Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC"}]}]}, "cveMetadata": {"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "assignerShortName": "hackerone", "cveId": "CVE-2021-22936", "datePublished": "2021-08-16T18:38:52", "dateReserved": "2021-01-06T00:00:00", "dateUpdated": "2024-08-03T18:58:25.950Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*", "matchCriteriaId": "4F450898-0B06-4073-9B76-BF22F68BD14F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r1.0:*:*:*:*:*:*", "matchCriteriaId": "130C8955-BDA4-4518-8EBA-740EB08FC3E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:*", "matchCriteriaId": "5AA4B39F-2FB9-4752-B1F1-18812B0990B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*", "matchCriteriaId": "ABD840BF-944E-4F4C-96DC-0256286338F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r2.0:*:*:*:*:*:*", "matchCriteriaId": "4E2D041D-9BDD-416D-B658-1C517C854104", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r3.0:*:*:*:*:*:*", "matchCriteriaId": "7155EB34-E8E0-49AF-BDA2-FB4BFA44662E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r4.0:*:*:*:*:*:*", "matchCriteriaId": "25EE614A-5F32-4CA9-998A-4FAF16DC100C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r5.0:*:*:*:*:*:*", "matchCriteriaId": "F49EE829-A2CD-491E-BFC3-7888491D7C58", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r6.0:*:*:*:*:*:*", "matchCriteriaId": "2254DDF1-7FF3-49E1-8826-91F49A6794F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r7.0:*:*:*:*:*:*", "matchCriteriaId": "B8EA4DA8-CD09-41AC-ADCB-27CF771C016B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r8.0:*:*:*:*:*:*", "matchCriteriaId": "4D6CECCB-18BA-4219-95A2-2525A2BDCE36", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r9.0:*:*:*:*:*:*", "matchCriteriaId": "B7006C07-0E3F-4890-A1B3-533E10924D49", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*", "matchCriteriaId": "43AF1D62-D827-4495-A4B0-CCA0C2BEE68F", "versionEndExcluding": "9.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized web parameter."}, {"lang": "es", "value": "Una vulnerabilidad en Pulse Connect Secure, versiones anteriores a 9.1R12, podr\u00eda permitir a un actor de amenazas llevar a cabo un ataque de tipo cross-site script contra un administrador autenticado por medio de un par\u00e1metro web no digitalizado."}], "id": "CVE-2021-22936", "lastModified": "2024-11-21T05:50:58.300", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-08-16T19:15:13.627", "references": [{"source": "support@hackerone.com", "tags": ["Vendor Advisory"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44858/?kA23Z000000L6oySAC"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "support@hackerone.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}