CVE-2021-22900

Publication date

2021-05-27 11:15:27

Family

hackerone

State

PUBLISHED

Description

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.