CVE-2017-11196: Pulse Connect Secure 8.3R1 has CSRF in logout.cgi.

Security readout for executives and security teams

This CVE describes a CSRF weakness in Pulse Connect Secure 8.3R1 where the admin panel logout action lacks CSRF protection. A malicious page could cause an authenticated administrator to be logged out. The documented impact is session disruption, not system takeover or data theft. Exposure is most relevant to organizations running Pulse Connect Secure 8.3R1 with administrator access reachable through a browser. The bundle does not prove other versions are affected, and the structured affected-product data is incomplete. Treat this as a low-priority hygiene issue unless the affected appliance is internet-exposed or administrators routinely browse untrusted sites from active admin sessions. Prioritize normal patch management and admin-interface hardening. Mitigation focus: Check vendor guidance and release notes for fixed Pulse Connect Secure versions.; Upgrade affected 8.3R1 systems if vendor guidance identifies a corrected release.; Restrict administrative interface access to trusted networks or VPN paths..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.