kb.pulsesecure.net
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601 CVE-2020-8239
CRITICAL
Record summary
CVE-2020-8239 has a selected CVSS score of 9.8 (critical); EIP currently links 1 repository PoC.
Description
A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Pulse Secure Desktop Cient | CVE List | 9.1R9 | affected |
Proofs of concept
1Repository PoCs
GitHubwithdk/pulse-secure-vpn-mitm-researchRepository PoCby withdkStars: 24Not analyzed4 files
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-8239