The vulnerability of the executable file PulseSecureService.exe in the corporate SSL-based VPN Pulse Secure Desktop Client allows a hacker to increase their privileges.

The vulnerability of the executable file PulseSecureService.exe in the corporate SSL-based VPN Pulse Secure Desktop Client is due to a “race condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2020-13162

CVE-2020-13162 (Pulse Secure TOCTOU Privilege Escalation) affects Pulse Secure Windows clients, specifically the Desktop Client and Standalone Installer Service. The vulnerability is a time-of-check to time-of-use race in PulseSecureService.exe that runs with SYSTEM privileges, allowing an unpriv...

CVE-2020-13162

A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows which runs as NT AUTHORITY/SYSTEM allows unprivileged users to run a Microsoft Installer executable with elevated privileges...