TI-2018-11311 Aliases CVE-2018-15865 GHSA-xc7r-jvc4-7jrc

The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability.

LOW 34Published 2018-09-06 · Updated 2024-08-05

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability.

Why it matters now

EPSS 0.00317 24th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 25

CPE	Versions	Role	Vendor
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r1.0:::::macos::	5.1r1.0	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r1.1:::::macos::	5.1r1.1	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r2.0:::::macos::	5.1r2.0	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r3.0:::::macos::	5.1r3.0	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r3.1:::::macos::	5.1r3.1	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r3.2:::::macos::	5.1r3.2	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r4.0:::::macos::	5.1r4.0	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r5.0:::::macos::	5.1r5.0	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r5.1:::::macos::	5.1r5.1	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r6.0:::::macos::	5.1r6.0	Vulnerable	Pulse Secure

cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r1.0:*:*:*:*:macos:*:* Versions 5.1r1.0 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r1.1:*:*:*:*:macos:*:* Versions 5.1r1.1 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r2.0:*:*:*:*:macos:*:* Versions 5.1r2.0 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r3.0:*:*:*:*:macos:*:* Versions 5.1r3.0 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r3.1:*:*:*:*:macos:*:* Versions 5.1r3.1 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r3.2:*:*:*:*:macos:*:* Versions 5.1r3.2 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r4.0:*:*:*:*:macos:*:* Versions 5.1r4.0 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r5.0:*:*:*:*:macos:*:* Versions 5.1r5.0 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r5.1:*:*:*:*:macos:*:* Versions 5.1r5.1 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r6.0:*:*:*:*:macos:*:* Versions 5.1r6.0 Vulnerable ·Pulse Secure

Show 15 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r7.0:::::macos::	5.1r7.0	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r8.0:::::macos::	5.1r8.0	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r9.0:::::macos::	5.1r9.0	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r9.1:::::macos::	5.1r9.1	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r10.0:::::macos::	5.1r10.0	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1rx:::::mac_os_x::	5.1rx	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r1:::::macos::	5.3r1	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r1.1:::::macos::	5.3r1.1	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r2:::::macos::	5.3r2	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r3:::::macos::	5.3r3	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r4:::::macos::	5.3r4	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r4.1:::::macos::	5.3r4.1	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r4.2:::::macos::	5.3r4.2	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r5:::::macos::	5.3r5	Vulnerable	Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r5.2:::::macos::	5.3r5.2	Vulnerable	Pulse Secure

cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r7.0:*:*:*:*:macos:*:* Versions 5.1r7.0 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r8.0:*:*:*:*:macos:*:* Versions 5.1r8.0 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r9.0:*:*:*:*:macos:*:* Versions 5.1r9.0 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r9.1:*:*:*:*:macos:*:* Versions 5.1r9.1 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1r10.0:*:*:*:*:macos:*:* Versions 5.1r10.0 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.1rx:*:*:*:*:mac_os_x:*:* Versions 5.1rx Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r1:*:*:*:*:macos:*:* Versions 5.3r1 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r1.1:*:*:*:*:macos:*:* Versions 5.3r1.1 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r2:*:*:*:*:macos:*:* Versions 5.3r2 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r3:*:*:*:*:macos:*:* Versions 5.3r3 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r4:*:*:*:*:macos:*:* Versions 5.3r4 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r4.1:*:*:*:*:macos:*:* Versions 5.3r4.1 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r4.2:*:*:*:*:macos:*:* Versions 5.3r4.2 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r5:*:*:*:*:macos:*:* Versions 5.3r5 Vulnerable ·Pulse Secure
cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3r5.2:*:*:*:*:macos:*:* Versions 5.3r5.2 Vulnerable ·Pulse Secure

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-15865
2026-10-03 Alias added: GHSA-xc7r-jvc4-7jrc

References

Advisory 1

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877

TI-2020-10343 A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure… CVSS 3.1HIGH 7.0
TI-2020-06657 A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client… CVSS 3.1CRITICAL 9.8
TI-2020-06672 Path traversal in Pulse Secure Desktop Client CVSS 3.1HIGH 8.8
TI-2019-08391 In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access… CVSS 3.0HIGH 8.1
TI-2020-06659 A vulnerability in the Pulse Secure Desktop Client < 9.1R9 could allow the attacker to… CVSS 3.1HIGH 7.5
TI-2020-06668 A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege. CVSS 3.1HIGH 7.8

See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences

The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability.

Key facts

Summary

Why it matters now

SSVC decision points

Affected products

CPE configurations NVD · 25

Remediation

Timeline

References

Advisory 1

More Pulse Secure Desktop Client vulnerabilities

Sources