Vulnerability threat dossier
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .
VTP analyst assessment
CISA KEV lists this Ivanti Pulse Connect Secure flaw as known exploited globally and notes known ransomware campaign use. It permits unauthenticated remote arbitrary file reads in the affected versions.
0 record references and 0 source references passed trusted post-response validation. The current deterministic record contains 0 independent evidence groups.
CISA KEV establishes global exploitation, not activity in this environment.
No first-party sensor telemetry is configured, so local observation is unknown.
First-party honeypot request semantics are potentially consistent with this CVE. This is an unconfirmed candidate match, not proof of exploitation or successful execution.
Review in your environment: if you use Pulse Connect Secure, check exposure and whether affected 8.2, 8.3, or 9.0 releases have the listed fixes.
First-party deterministic correlation
Honeypot request semantics are strongly consistent with CVE-2019-11510. This identifies likely attack intent, not successful exploitation or execution.
Basis: deterministic technical candidate
VTP deterministic assessment
CISA KEV lists this vulnerability as known to be exploited globally.
EPSS is 1.00; this is predictive context, not exploitation evidence.
First-party honeypot request semantics are potentially consistent with this CVE. This is an unconfirmed candidate match, not proof of exploitation or successful execution.
Material change ledger
Claim provenance
0 primary sources · 0 dependent secondary reports · 1 reports with unresolved independence. Repetition remains visible without multiplying confirmation.
Event history
CISA lists global known exploitation. This is not a VTP sensor observation.
Original publications
The U.S. Department of Justice (DoJ) on Friday corrected a previously issued press statement that several of its agencies were victims of attacks carried out by Chinese threat actors, instead now pointing out that they were among those targeted. Last week, the DoJ said the National Aeronautics and Space Administration, Federal Reserve, Department of Energy, Department of Justice, Department
Technical vulnerability data
Raw observations
First-party honeypot request semantics are potentially consistent with this CVE. This is an unconfirmed candidate match, not proof of exploitation or successful execution.