PT-2020-20062

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions prior to 9.1R9 Description A vulnerability exists that allows for Remote Code Execution RCE if users connect to a malicious server. This issue is specific to the Windows Pulse Desktop Client. Recommendation...

PT-2020-20059

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client Linux versions prior to 9.1R9 Description A local attacker could potentially exploit this issue to escalate privileges. Recommendations For versions prior to 9.1R9, update to version 9.1R9 or later to resolve the...

PT-2020-20058

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client Linux versions prior to 9.1R9 Description A local attacker could perform a buffer overflow due to a vulnerability in the Pulse Secure Desktop Client. Recommendations For versions prior to 9.1R9, update to version...

CVE-2020-8240: Undefined Security Weakness

A vulnerability in the Pulse Secure Desktop Client 9.1R9 allows a restricted user on an endpoint machine can use system-level privileges if the Embedded Browser is configured with Credential Provider. This vulnerability only affects Windows PDC if the Embedded Browser is configured with the...

CVE-2020-8241: Undefined Security Weakness

A vulnerability in the Pulse Secure Desktop Client 9.1R9 could allow the attacker to perform a MITM Attack if end users are convinced to connect to a malicious server...

CVE-2020-8956

Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...

PT-2020-20052 · Pulse Secure · Pulse Secure Desktop Client

Name of the Vulnerable Software and Affected Versions: Pulse Secure Desktop Client versions prior to 9.1R9 Description: A vulnerability could allow an attacker to perform a Man-in-the-Middle MITM attack if end users are convinced to connect to a malicious server. Recommendations: For versions pri...

PT-2020-20394

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions 9.0Rx through 9.0R4 Pulse Secure Desktop Client versions 9.1Rx through 9.1R3 Description The issue reveals users' passwords if the Save Settings feature is enabled. Recommendations For Pulse Secure Desktop...

CVE-2020-8956: Weak Password Requirements

Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...

PT-2020-20050

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions prior to 9.1R9 Description The issue concerns a client registry privilege escalation attack. It requires a server-side upgrade due to the Standalone Host Checker Client Windows and Windows PDC...

PT-2018-10235

Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions 5.3 up to and including 6.0 build 1769 Description The issue is related to Insecure Permissions in the Pulse Secure Desktop Client on Windows. Recommendations For Pulse Secure Desktop Client versions 5.3 up...

CVE-2018-11002: Incorrect Permission Assignment for Critical Resource

Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...

Pulse Secure Desktop Client Elevation of Privilege Vulnerability

Pulse Secure Desktop Client provides a secure and trusted connection for end devices accessing the Pulse Secure gateway. The system service installed by Pulse Secure Desktop Client has a security vulnerability in the access control settings. By emulating a trusted process communicating with this...