CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-10-28
Pulse Connect Secure Admin Web Interface Arbitrary Code Execution Vulnerability (CVE-2020-8260) Technical Advisory
[Affected Scope] Pulse Connect Secure versions prior to 9.1R9 admin web interface
[Impact] An authenticated administrator-level attacker can execute arbitrary code with system privileges via uncontrolled gzip extraction
[Mitigation] Immediately upgrade Pulse Connect Secure to version 9.1R9 or higher and restrict external access to the admin interface