""ET INFO Pulse Secure VPN Version Disclosure Attempt""
SID: 2033749
Revision: 3
Class Type: misc-activity
Metadata: affected_product Pulse_Secure, attack_target Networking_Equipment, created_at 2021_08_20, deployment Perimeter, deployment SSLDecrypt, performance_impact Low, signature_severity Informational, updated_at 2023_04_28
Reference:
Protocol: tcp
Source Network: any
Source Port: any
Destination Network: [$HOME_NET,$HTTP_SERVERS]
Destination Port: any
Flow: established,to_server
Contents:
-
Value: "GET"
-
Value: "/dana-admin/misc/admin.cgi"
Within:
PCRE:
Special Options:
-
http_method
-
fast_pattern
-
http_uri