CVE-2020-8239

Published: Oct 28, 2020Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC.

Affected (14)

Products: Pulsesecure: Pulse Secure Desktop Client

Pulsesecure

1 product

Pulse Secure Desktop Client

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Pulsesecure Pulse Secure Desktop Client	Before 9.1
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r1
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r2
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r3.1
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r3
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r4.1
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r4.2
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r4
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r5
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r6
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r7.1
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r7
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r8.2
Pulsesecure Pulse Secure Desktop Client	Version 9.1 r8

References (2)

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601

Source: support@hackerone.com

Vendor Advisory

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.