7.2
Élevée
CVE-2020-8260 Ivanti Pulse Connect Secure Code Execution Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-434
Description
A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Pulse Connect Secure / Pulse Policy Secure | 9.1R9 | Pas de correctif indiqué |
Autres CVE de Pulse Connect Secure / Pulse Policy Secure
Les 5 CVE de Pulse Connect Secure / Pulse Policy Secure →
CVE-2020-8263
A vulnerability in the authenticated user web interface of Pulse Connect Secure < 9.1R9 could allow attackers to conduct…
Non notée
CVE-2020-8262
A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct…
Non notée
CVE-2020-8261
A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection
Non notée
CVE-2020-8255
A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform…
Non notée