201 matches found
CVE-2020-8254: Relative Path Traversal
A vulnerability in the Pulse Secure Desktop Client 9.1R9 has Remote Code Execution RCE if users can be convinced to connect to a malicious server. This vulnerability only affects Windows PDC.To improve the security of connections between Pulse clients and Pulse Connect Secure, see below...
CVE-2020-8956
Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...
CVE-2020-8956: Weak Password Requirements
Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...
PT-2020-20394
Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions 9.0Rx through 9.0R4 Pulse Secure Desktop Client versions 9.1Rx through 9.1R3 Description The issue reveals users' passwords if the Save Settings feature is enabled. Recommendations For Pulse Secure Desktop...
PT-2020-20050
Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions prior to 9.1R9 Description The issue concerns a client registry privilege escalation attack. It requires a server-side upgrade due to the Standalone Host Checker Client Windows and Windows PDC...
PT-2020-20052 · Pulse Secure · Pulse Secure Desktop Client
Name of the Vulnerable Software and Affected Versions: Pulse Secure Desktop Client versions prior to 9.1R9 Description: A vulnerability could allow an attacker to perform a Man-in-the-Middle MITM attack if end users are convinced to connect to a malicious server. Recommendations: For versions pri...
Microsoft Windows UAC Unsafe Interaction Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to access an interactive desktop as a low-privileged user on the target system in order to exploit this vulnerability. The specific flaw exist...
Pulse Secure Pulse Secure Desktop Information Disclosure Vulnerability
Pulse Secure Pulse Desktop Client is a suite of client software from Pulse Secure USA for accessing end devices on Juniper Pulse Secure gateways. An information disclosure vulnerability exists in Pulse Secure Pulse Secure Desktop 9.0R1 and prior versions. The vulnerability stems from an error in...
CVE-2018-20812
An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...
CVE-2018-20812
An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...
PT-2019-10251
Name of the Vulnerable Software and Affected Versions: Pulse Secure Desktop versions 9.0R1 and below Description: The issue is related to information exposure where IPv6 DNS traffic is sent outside of the VPN tunnel when Traffic Enforcement is enabled. This problem is specific to dual-stack...
CVE-2018-20812: Exposure of Sensitive Information to an Unauthorized Actor
An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...
Windows UAC Protection Bypass
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/exe' require 'msf/core/exploit/powershell' class MetasploitModule 'Windows UAC Protection Bypass Via ComputerDefault Registry Key', 'Descriptio...
CVE-2018-11002
Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...
PT-2018-10235
Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions 5.3 up to and including 6.0 build 1769 Description The issue is related to Insecure Permissions in the Pulse Secure Desktop Client on Windows. Recommendations For Pulse Secure Desktop Client versions 5.3 up...
CVE-2018-11002: Incorrect Permission Assignment for Critical Resource
Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...
Pulse Secure Desktop Formatting String Vulnerability
Pulse Secure Desktop is a suite of client software from Pulse Secure USA for endpoint devices that access Juniper Pulse Secure gateways. A formatting string vulnerability exists in Pulse Secure Desktop macOS versions 5.3RX prior to 5.3R5 and 9.0R1. A local attacker could exploit this vulnerabilit...
CVE-2018-15726
The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability...