4.9

CVE-2020-8255

A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary file reading vulnerability is fixed using encrypted URL blacklisting that prevents these messages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pulsesecure ≫ Pulse Secure Desktop Client SwPlatform linux Version < 9.1
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update - SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r2 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r3 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r3.1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r4 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r4.1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r4.2 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r5 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r6 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r7 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r7.1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r8 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r8.2 SwPlatform linux
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.26% 0.807
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.9 1.2 3.6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
Vendor Advisory