Privilege escalation

2020-10-2813:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC.

CPENameOperatorVersion
pulse_secure_desktop_clienteq9.1 r2
pulse_secure_desktop_clienteq9.1 r3
pulse_secure_desktop_clienteq9.1 r3.1
pulse_secure_desktop_clienteq9.1 r4
pulse_secure_desktop_clienteq9.1 r4.1
pulse_secure_desktop_clienteq9.1 r4.2
pulse_secure_desktop_clienteq9.1 r5
pulse_secure_desktop_clienteq9.1 r6
pulse_secure_desktop_clienteq9.1 r7
pulse_secure_desktop_clienteq9.1 r7.1

Name	Operator	Version
pulse_secure_desktop_client	eq	9.1 r2
pulse_secure_desktop_client	eq	9.1 r3
pulse_secure_desktop_client	eq	9.1 r3.1
pulse_secure_desktop_client	eq	9.1 r4
pulse_secure_desktop_client	eq	9.1 r4.1
pulse_secure_desktop_client	eq	9.1 r4.2
pulse_secure_desktop_client	eq	9.1 r5
pulse_secure_desktop_client	eq	9.1 r6
pulse_secure_desktop_client	eq	9.1 r7
pulse_secure_desktop_client	eq	9.1 r7.1