CVE-2020-15408

An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8. An authenticated attacker can access the admin page console via the end-user web interface because of a rewrite.

Published: Jul 28, 2020
Updated: Apr 13, 2023
CVE: CVE-2020-15408
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.6
AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

CVSS v2:

Severity: Medium
Score: 5.8
AV:N/AC:M/Au:N/C:P/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
pulsesecure / pulse_connect_secure	-	9.1.x
pulsesecure / pulse_secure_desktop_client	9.1-r1.0	9.1-r1.0.x
pulsesecure / pulse_secure_desktop_client	9.1-r2.0	9.1-r2.0.x
pulsesecure / pulse_secure_desktop_client	9.1-r3.0	9.1-r3.0.x
pulsesecure / pulse_secure_desktop_client	9.1-r3.1	9.1-r3.1.x
pulsesecure / pulse_secure_desktop_client	9.1-r4.0	9.1-r4.0.x
pulsesecure / pulse_secure_desktop_client	9.1-r5.0	9.1-r5.0.x
pulsesecure / pulse_secure_desktop_client	9.1-r4.1	9.1-r4.1.x
pulsesecure / pulse_secure_desktop_client	9.1-r4.2	9.1-r4.2.x
pulsesecure / pulse_secure_desktop_client	9.1-r6.0	9.1-r6.0.x
pulsesecure / pulse_secure_desktop_client	9.1-r7.0	9.1-r7.0.x

Vulnerability Database

289,784

CVE-2020-15408