7.2
Élevée
Exploitée
CVE-2020-8218 Pulse Connect Secure Code Injection Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-94
Description
A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Pulse Connect Secure | Versions non publiées |
Références
- kb.pulsesecure.net kb.pulsesecure.net
- www.gosecure.net www.gosecure.net
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Pulse Connect Secure
Les 21 CVE de Pulse Connect Secure →
CVE-2021-22965
A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a…
Non notée
CVE-2021-22937
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write…
Non notée
CVE-2021-22936
A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack…
Non notée
CVE-2021-22935
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command…
Non notée