CVE-2020-8239

Pulse Secure Desktop Client prior to 9.1R9 is affected by a client registry privilege escalation vulnerability (CVE-2020-8239). Root cause involves registry escalations linked to Standalone Host Checker Client (Windows) and Windows PDC. The issue is addressed by upgrading Pulse Secure components ...

CVE-2020-8239

A vulnerability in the Pulse Secure Desktop Client 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client Windows and Windows PDC...

CVE-2020-8254

A vulnerability in the Pulse Secure Desktop Client 9.1R9 has Remote Code Execution RCE if users can be convinced to connect to a malicious server. This vulnerability only affects Windows PDC.To improve the security of connections between Pulse clients and Pulse Connect Secure, see below...

CVE-2020-8254

CVE-2020-8254 affects Pulse Secure Desktop Client on Windows prior to 9.1R9. The issue allows Remote Code Execution if a user is persuaded to connect to a malicious server; the Windows PDC component is the affected area. Remediation is to upgrade PDC to 9.1R9 or apply the recommended security set...

CVE-2020-8240

A vulnerability in the Pulse Secure Desktop Client 9.1R9 allows a restricted user on an endpoint machine can use system-level privileges if the Embedded Browser is configured with Credential Provider. This vulnerability only affects Windows PDC if the Embedded Browser is configured with the...

CVE-2020-8240

CVE-2020-8240 affects the Pulse Secure Desktop Client prior to 9.1R9. The issue allows a restricted user on Windows to obtain system-level privileges when the Embedded Browser is configured with Credential Provider (affecting Windows PDC only). The vulnerability is part of a set of issues in Puls...

CVE-2020-8250

The CVE-2020-8250 issue affects Pulse Secure Desktop Client (Linux) before version 9.1R9. The underlying flaw allows a local attacker to escalate privileges due to elevation of privilege in the Linux PDC. Public records show CVSSv3.1 base score 7.8 (LOCAL, LOW attack complexity, Privileges Requir...

CVE-2020-8250

A vulnerability in the Pulse Secure Desktop Client Linux 9.1R9 could allow local attackers to escalate privilege...

CVE-2020-8249

A vulnerability in the Pulse Secure Desktop Client Linux 9.1R9 could allow local attackers to perform buffer overflow...

CVE-2020-8249

Pulse Secure Desktop Client (Linux) versions before 9.1R9 are affected by CVE-2020-8249, a local buffer overflow vulnerability that could be exploited by a local attacker. Remediation per the advisories is to upgrade to Pulse Secure Desktop Client 9.1R9 (and to apply related updates across PCS/PP...

CVE-2020-8248

A vulnerability in the Pulse Secure Desktop Client Linux 9.1R9 could allow local attackers to escalate privilege...

CVE-2020-8248

CVE-2020-8248 affects the Pulse Secure Desktop Client (Linux) prior to 9.1R9, enabling local privilege escalation. Root cause: elevation of privileges in Linux PDC. Impact: local attacker could obtain higher privileges. Remediation: upgrade to Pulse Secure Desktop Client 9.1R9 (also reflected in ...

CVE-2020-8260

A vulnerability in the Pulse Connect Secure 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2020-20068 · Pulse · Pulse Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure / Pulse Policy Secure versions prior to 9.1R9 Description: A vulnerability in the Pulse Connect Secure / Pulse Policy Secure allows for arbitrary cookie injection. Recommendations: For Pulse Connect Secure / Pulse Policy...

PT-2020-20069 · Pulse · Pulse Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure / Pulse Policy Secure versions prior to 9.1R9 Description: A vulnerability could allow attackers to conduct Cross-Site Scripting XSS and Open Redirection for authenticated user web interface. Recommendations: For versions...

Pulse Secure Pulse Desktop Client Information Disclosure Vulnerability

Pulse Secure Pulse Desktop Client is a suite of client software from Pulse Secure USA for accessing end devices on Juniper Pulse Secure gateways. An information disclosure vulnerability exists in Pulse Secure Desktop Client Windows platform versions 9.0R5 and earlier, 9.1R4 and earlier. The...

Pulse Secure Pulse Connect Secure and Pulse Policy Secure Cross-Site Request Forgery Vulnerabilities

Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse and Pulse Policy Secure are both products of Pulse Secure, Inc.Pulse Connect Secure is an SSL VPN solution. Pulse Connect Secure is an SSL VPN solution. Pulse Policy Secure is a network access control solution. A...

Vulnerabilities fixed in Pulse Secure products for Windows, Linux and Mac

Vulnerabilities have been fixed in Pulse Secure products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS Denial-of-Service DoS. Circumvention of security...

CVE-2020-8956

Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...

CVE-2020-15352

An XML external entity XXE vulnerability in Pulse Connect Secure PCS before 9.1R9 and Pulse Policy Secure PPS before 9.1R9 allows remote authenticated admins to conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...