CVE-2020-15408
published 2020-07-28CVE-2020-15408: An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8. An authenticated attacker can access the admin page console via the end-user web…
PriorityP422medium4.6CVSS 3.1
AVNACLPRLUIRSUCLILAN
EPSS
0.77%
51.0th percentile
An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8. An authenticated attacker can access the admin page console via the end-user web interface because of a rewrite.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| pulsesecure | pulse_connect_secure | <= 9.1 | — |
| pulsesecure | pulse_secure_desktop_client | — | — |
CVSS provenance
nvdv3.14.6MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ivanti
Ivanti Security Advisory: CVE-2020-15408
vendor_ivanti·2020-07-28·CVSS 3.7
CVE-2020-15408 [LOW] Ivanti Security Advisory: CVE-2020-15408
Ivanti Security Advisory: CVE-2020-15408
An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8. An authenticated attacker can access the admin page console via the end-user web interface because of a rewrite.
CVE IDs: CVE-2020-15408
CVSS Base Score: 3.7
Severity: LOW
GHSA
GHSA-x3p9-c74w-j5mx: An issue was discovered in Pulse Secure Pulse Connect Secure before 9
ghsa_unreviewed·2022-05-24
CVE-2020-15408 [MEDIUM] CWE-862 GHSA-x3p9-c74w-j5mx: An issue was discovered in Pulse Secure Pulse Connect Secure before 9
An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8. An authenticated attacker can access the admin page console via the end-user web interface because of a rewrite.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-07-28
Published