Vulnerability · Published Sep 30, 2022 · Assigned by hackerone
CVE-2022-21826
Medium 5.4
In plain English
A medium-severity security flaw in Pulse Connect Secure VPN Server. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 46.0% (higher than 99% of all known vulnerabilities).
Official description
Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request, it ignores the request's Content-Length header and leaves the POST body on the TCP/TLS socket. This body ends up prefixing the next HTTP request sent down that connection, this means when someone loads website attacker may be able to make browser issue a POST to the application, enabling XSS.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Pulse Connect Secure VPN Server | 9.1R14 and below |
Weakness: CWE-444