Home

CVE-2020-8260

Description

A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.

Risk Information

Base Score
7.2
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
75.886

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r4.1Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r4.2Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r4.3Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r8.1Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r8.2Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r1.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r2.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r3.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r4.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r5.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r6.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r7.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r8.0Windows
Multiple Vulnerabilities are affected in Ivanti Connect Secure 9.1.r8.4Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234