PoC Index

CVE-2020-8239

CRITICAL 9.8EPSS 2.0%

A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC.

CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
2.02% chance of exploitation in the next 30 days, 80th percentile
Published
2020-10-28
Updated
2024-08-04

Proof-of-concept exploits (1)

References

Related