Lucene search

CVE-2020-8260

🗓️ 28 Oct 2020 12:13:47Reported by hackeroneType

A flaw in Pulse Connect Secure < 9.1R9 admin web interface could lead to arbitrary code execution via uncontrolled gzip extraction

Reporter	Title	Published	Views	Family All 22
CVE	CVE-2020-8260	28 Oct 202013:15	–	cve
Metasploit	Pulse Secure VPN gzip RCE	7 Dec 202015:54	–	metasploit
Packet Storm	Pulse Secure VPN Remote Code Execution	18 Dec 202000:00	–	packetstorm
AttackerKB	CVE-2020-8260	28 Oct 202000:00	–	attackerkb
0day.today	Pulse Secure VPN Remote Code Execution Exploit	18 Dec 202000:00	–	zdt
Prion	Code injection	28 Oct 202013:15	–	prion
Vulnrichment	CVE-2020-8260	28 Oct 202012:47	–	vulnrichment
CISA KEV Catalog	Ivanti Pulse Connect Secure Code Execution Vulnerability	3 Nov 202100:00	–	cisa_kev
NVD	CVE-2020-8260	28 Oct 202013:15	–	nvd
The Hacker News	Pulse Secure VPNs Get New Urgent Update for Poorly Patched Critical Flaw	9 Aug 202109:00	–	thn

[
  {
    "product": "Pulse Connect Secure / Pulse Policy Secure",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "9.1R9"
      }
    ]
  }
]

Source	Link
kb	www.kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
packetstormsecurity	www.packetstormsecurity.com/files/160619/Pulse-Secure-VPN-Remote-Code-Execution.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Oct 2020 12:47Current

7.1High risk

Vulners AI Score7.1

EPSS0.72162

CWE-434