cbcvebase.
CVE-2020-8956
published 2020-10-27

CVE-2020-8956: Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.

PriorityP418low3.3CVSS 3.1
AVLACLPRLUINSUCLINAN
EXPLOIT
EPSS
1.18%
63.7th percentile
Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.

Affected

11 ranges
VendorProductVersion rangeFixed in
pulsesecurepulse_secure_desktop——
pulsesecurepulse_secure_desktop——
pulsesecurepulse_secure_desktop——
pulsesecurepulse_secure_desktop——
pulsesecurepulse_secure_desktop——
pulsesecurepulse_secure_desktop——
pulsesecurepulse_secure_desktop——
pulsesecurepulse_secure_desktop——
pulsesecurepulse_secure_desktop——
pulsesecurepulse_secure_desktop——
pulsesecurepulse_secure_desktop——

CVSS provenance

nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv3.03.8LOWCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
nvdv2.01.9LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.