CVE-2020-8255 — Improper Input Validation in Pulse Secure Desktop Client

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.9MEDIUMNVD
EPSS
13.5%
top 5.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Pulsesecure Pulse Secure Desktop ClientPulse Connect Secure Pulse Policy Secure
Timeline
PublishedOct 28
Latest updateMay 24

Description

A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary file reading vulnerability is fixed using encrypted URL blacklisting that prevents these messages.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 1.2 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-4m7r-69vr-gmv2: A vulnerability in the Pulse Connect Secure < 9↗2022-05-24
▶
CVEList
CVE-2020-8255: A vulnerability in the Pulse Connect Secure < 9↗2020-10-28
▶
CVE-2020-8255 — Improper Input Validation | cvebase