CVE-2020-8254

CVE-2020-8254 affects Pulse Secure Desktop Client on Windows prior to 9.1R9. The issue allows Remote Code Execution if a user is persuaded to connect to a malicious server; the Windows PDC component is the affected area. Remediation is to upgrade PDC to 9.1R9 or apply the recommended security set...

PT-2020-20052 · Pulse Secure · Pulse Secure Desktop Client

Name of the Vulnerable Software and Affected Versions: Pulse Secure Desktop Client versions prior to 9.1R9 Description: A vulnerability could allow an attacker to perform a Man-in-the-Middle MITM attack if end users are convinced to connect to a malicious server. Recommendations: For versions pri...

Pulse Secure Pulse Secure Desktop Information Disclosure Vulnerability

Pulse Secure Pulse Desktop Client is a suite of client software from Pulse Secure USA for accessing end devices on Juniper Pulse Secure gateways. An information disclosure vulnerability exists in Pulse Secure Pulse Secure Desktop 9.0R1 and prior versions. The vulnerability stems from an error in...

CVE-2018-20812

An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...

CVE-2018-20812

An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...

CVE-2018-11002

Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...

Pulse Secure Desktop Formatting String Vulnerability

Pulse Secure Desktop is a suite of client software from Pulse Secure USA for endpoint devices that access Juniper Pulse Secure gateways. A formatting string vulnerability exists in Pulse Secure Desktop macOS versions 5.3RX prior to 5.3R5 and 9.0R1. A local attacker could exploit this vulnerabilit...

CVE-2018-15749

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...

CVE-2018-15865

The Pulse Secure Desktop macOS has a Privilege Escalation Vulnerability...

CVE-2018-15726

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability...

Pulse Secure Desktop Linux clients GUI component man-in-the-middle bypass security vulnerability

Pulse Secure Desktop Linux clients formerly known as Juniper Junos Pulse is Juniper Networks' suite of Linux-based client software for accessing endpoint devices on the Juniper Pulse Secure Gateway.The GUI component also known as PulseUI is one of the graphical user interfaces. The GUI component...

CVE-2016-2408

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

Pulse Secure Desktop Client Elevation of Privilege Vulnerability

Pulse Secure Desktop Client provides a secure and trusted connection for end devices accessing the Pulse Secure gateway. The system service installed by Pulse Secure Desktop Client has a security vulnerability in the access control settings. By emulating a trusted process communicating with this...