This vulnerability does not require a PDC upgrade. To improve the security of connections between Pulse clients and Pulse Connect Secure, see below recommendation(s): Disable Dynamic certificate trust for PDC. This issue was fixed in 9.1R4 and the above versions to enhance the security. An administrator can disable the “Save settings” option in the client while entering the password. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC.”]
Source: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601