CVE-2020-8260

Published: Oct 28, 2020Modified: Dec 18, 2025CISA KEV

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.

Affected (16)

Products: Ivanti: Connect Secure

Ivanti

1 product

Connect Secure

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Ivanti Connect Secure	Up to 9.0
Ivanti Connect Secure	Version 9.1
Ivanti Connect Secure	Version 9.1 r1.0
Ivanti Connect Secure	Version 9.1 r2.0
Ivanti Connect Secure	Version 9.1 r3.0
Ivanti Connect Secure	Version 9.1 r4.0
Ivanti Connect Secure	Version 9.1 r4.1
Ivanti Connect Secure	Version 9.1 r4.2
Ivanti Connect Secure	Version 9.1 r4.3
Ivanti Connect Secure	Version 9.1 r5.0
Ivanti Connect Secure	Version 9.1 r6.0
Ivanti Connect Secure	Version 9.1 r7.0
Ivanti Connect Secure	Version 9.1 r8.0
Ivanti Connect Secure	Version 9.1 r8.1
Ivanti Connect Secure	Version 9.1 r8.2
Ivanti Connect Secure	Version 9.1 r8.4