CVE-2020-8255

A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary file reading vulnerability is fixed using encrypted URL blacklisting that prevents these messages.

Score

CVSS 3.1 4.9 Medium

Status

Modified - support@hackerone.com

Published

2020-10-28

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• Pulse Secure Desktop Client (Pulsesecure)

References

• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601