Home

CVE-2020-13162

Description

A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows (which runs as NT AUTHORITY/SYSTEM) allows unprivileged users to run a Microsoft Installer executable with elevated privileges.

Risk Information

Base Score
7.0
MODERATE
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.347

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 5.3.r1.0Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 5.3.r1.1Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 5.3.r2.0Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 5.3.r3.0Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 5.3.r4.1Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 5.3.r4.2Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 5.3.r5.0Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 5.3.r5.2Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 5.3.r6.0Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 5.3.r7.0Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 9.0.r1.0Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 9.0.r2Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 9.0.r2.1Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 9.0.r3Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 9.0.r3.2Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 9.0.r4Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 9.0.r4.0Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 9.0.r5.0Windows
Vulnerabilities CVE-2020-13162 are affected in Pulse secure for windows 9.0.r6.0Windows
Vulnerabilities CVE-2020-13162,CVE-2020-15408 are affected in Pulse secure for windows 9.1.r1.0Windows
Vulnerabilities CVE-2020-13162,CVE-2020-15408 are affected in Pulse secure for windows 9.1.r2.0Windows
Vulnerabilities CVE-2020-13162,CVE-2020-15408 are affected in Pulse secure for windows 9.1.r3.0Windows
Vulnerabilities CVE-2020-13162,CVE-2020-15408,CVE-2020-8240,CVE-2020-8254 are affected in Pulse secure for windows 9.1.r3.1Windows
Vulnerabilities CVE-2020-13162,CVE-2020-15408 are affected in Pulse secure for windows 9.1.r4.0Windows
Vulnerabilities CVE-2020-13162,CVE-2020-15408,CVE-2020-8240,CVE-2020-8254 are affected in Pulse secure for windows 9.1.r4.1Windows
Vulnerabilities CVE-2020-13162,CVE-2020-15408,CVE-2020-8240,CVE-2020-8254 are affected in Pulse secure for windows 9.1.r4.2Windows
Vulnerabilities CVE-2020-13162,CVE-2020-15408 are affected in Pulse secure for windows 9.1.r5.0Windows
Vulnerabilities CVE-2020-13162,CVE-2020-15408 are affected in Pulse secure for windows 9.1.r6.0Windows
Vulnerabilities CVE-2020-13162,CVE-2020-15408 are affected in Pulse secure for windows 9.1.r7.0Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234