CVE-2020-8239

A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC.

Affected

Pulse Secure Desktop Cient

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.02% chance of exploitation in the next 30 days, 81st percentile

Published

2020-10-28

Updated

2024-08-04

Proof-of-concept exploits (1)

• withdk/pulse-secure-vpn-mitm-research24★ · 2020-11-01

Security advisories

• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601

References

• CVE Record
• NVD entry

Related

• CVE-2020-8218
• CVE-2020-8241