CVE-2020-8254

CVE-2020-8254 affects Pulse Secure Desktop Client on Windows prior to 9.1R9. The issue allows Remote Code Execution if a user is persuaded to connect to a malicious server; the Windows PDC component is the affected area. Remediation is to upgrade PDC to 9.1R9 or apply the recommended security set...

CVE-2020-8241

CVE-2020-8241 affects the Pulse Secure Desktop Client when running versions prior to 9.1R9, enabling a MITM attack if users connect to a malicious server. Public-coverage documents (SA44601) confirm remediation by upgrading to Pulse Secure Desktop Client 9.1R9 (and note related mitigations such a...

CVE-2020-8239

Pulse Secure Desktop Client prior to 9.1R9 is affected by a client registry privilege escalation vulnerability (CVE-2020-8239). Root cause involves registry escalations linked to Standalone Host Checker Client (Windows) and Windows PDC. The issue is addressed by upgrading Pulse Secure components ...

CVE-2020-8255

The CVE-2020-8255 entry applies to Pulse Connect Secure (PCS) admin web interface prior to 9.1R9. Reported issue: an authenticated attacker can read arbitrary files due to an input/URL handling flaw; fix implemented via encrypted URL blacklisting. Red Hat and other advisories corroborate the same...

CVE-2020-8263

CVE-2020-8263 relates to Pulse Connect Secure (PCS) and affects versions earlier than 9.1R9. The issue is a Cross-Site Scripting (XSS) flaw in the authenticated user web interface accessible via the CGI file. Several connected sources confirm the vulnerability in PCS/PPS (admin vs. user interface...

CVE-2020-8240

CVE-2020-8240 affects the Pulse Secure Desktop Client prior to 9.1R9. The issue allows a restricted user on Windows to obtain system-level privileges when the Embedded Browser is configured with Credential Provider (affecting Windows PDC only). The vulnerability is part of a set of issues in Puls...

CVE-2020-8249

Pulse Secure Desktop Client (Linux) versions before 9.1R9 are affected by CVE-2020-8249, a local buffer overflow vulnerability that could be exploited by a local attacker. Remediation per the advisories is to upgrade to Pulse Secure Desktop Client 9.1R9 (and to apply related updates across PCS/PP...

CVE-2020-8248

CVE-2020-8248 affects the Pulse Secure Desktop Client (Linux) prior to 9.1R9, enabling local privilege escalation. Root cause: elevation of privileges in Linux PDC. Impact: local attacker could obtain higher privileges. Remediation: upgrade to Pulse Secure Desktop Client 9.1R9 (also reflected in ...

CVE-2020-8250

The CVE-2020-8250 issue affects Pulse Secure Desktop Client (Linux) before version 9.1R9. The underlying flaw allows a local attacker to escalate privileges due to elevation of privilege in the Linux PDC. Public records show CVSSv3.1 base score 7.8 (LOCAL, LOW attack complexity, Privileges Requir...