CVE-2021-22899

Ivanti Pulse Connect Secure Command Injection Vulnerability

Description

Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles.

Severity: HIGH

CVSS Score: 8.8

Vendor: Ivanti

Product: Pulse Connect Secure