9.8

CVE-2020-8239

A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pulsesecure ≫ Pulse Secure Desktop Client SwPlatform linux Version < 9.1
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r2 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r3 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r3.1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r4 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r4.1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r4.2 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r5 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r6 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r7 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r7.1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r8 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r8.2 SwPlatform linux
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.02% 0.789
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
Vendor Advisory