{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[],"affected_systems_content":"<ul> <li>Pulse Connect Secure versions 9.0RX et 9.1RX ant\u00e9rieures \u00e0 9.1R11.4</li> </ul> <p><strong>Note</strong> : Si des mesures de contournement ont \u00e9t\u00e9 appliqu\u00e9es, elles doivent \u00eatre retir\u00e9es en important le fichier remove-workaround-2104.xml, et les param\u00e8tres\u00a0<span id=\"j_id0:j_id1:j_id954\"><span id=\"j_id0:j_id1:j_id954:j_id955:j_id978\"><span id=\"j_id0:j_id1:j_id954:j_id955:j_id978:j_id979:j_id986\"><span id=\"j_id0:j_id1:j_id954:j_id955:j_id978:j_id979:j_id986:j_id987:j_id1230:j_id1232:3:j_id1233:j_id1234\">\"Files, Windows\" et \"Meetings\"</span></span></span></span> doivent \u00eatre restaur\u00e9s avant l'application du correctif (cf. bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur).</p> ","content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2021-22894","url":"https://www.cve.org/CVERecord?id=CVE-2021-22894"},{"name":"CVE-2021-22893","url":"https://www.cve.org/CVERecord?id=CVE-2021-22893"},{"name":"CVE-2021-22900","url":"https://www.cve.org/CVERecord?id=CVE-2021-22900"},{"name":"CVE-2021-22899","url":"https://www.cve.org/CVERecord?id=CVE-2021-22899"}],"links":[],"reference":"CERTFR-2021-AVI-335","revisions":[{"description":"Version initiale","revision_date":"2021-05-03T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Pulse Connect\nSecure. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire \u00e0 distance et un contournement de la politique de\ns\u00e9curit\u00e9.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans Pulse Connect Secure","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Pulse Secure SA44784 du 20 avril 2021","url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/"}]}