"After exfiltrating the /data partition we turned our attention to the rest of the device. This is probably a good time to point out what base operating system Ivanti is using: CentOS 6.4; which was released in 2013 and officially end of life in 2020. You read that correctly: Pulse Secure runs an 11-year-old version of Linux which hasn’t been supported since November 2020. More on this later."<p>It seem popular in corporate environments to just rely on vendors and their binary blobs.. not at all surprised to see such findings.
Better headline would be Ivanti Pulse Secure VPN.<p>Ivanti is a large company that "makes" VPNs, MDMs,patch management apps etc... Not just pulse secure VPN.<p>I say "makes" as the VPN was originally Juniper, the patch program they have was Shavlik. So they BUY IT enterprise companies when the VC money runs out or founder wants to exit.