CVE-2018-6374: Pulse Secure Desktop Linux Client

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set.

Affected products

• Pulse Secure Desktop Linux Client: before 5.2r9.2 (fixed in 5.2r9.2); before 5.3r4.2 (fixed in 5.3r4.2)

Published 2018-01-31. Last modified 2026-06-17.