Pulsesecure Pulse Secure Installer Service vulnerabilities

1 known vulnerability affecting pulsesecure/pulse_secure_installer_service.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-13162HIGHCVSS 7.0v8.3v9.12020-06-16

CVE-2020-13162 [HIGH] CWE-367 CVE-2020-13162: A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows (which runs as NT AUTHORITY/SYSTEM) allows unprivileged users to run a Microsoft Installer executable with elevated privileges.