CVE-2020-8218

Description

A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

References

https://www.tenable.com/cyber-exposure/2020-threat-landscape-retrospective

https://www.avira.com/en/blog/a-gafgyt-variant-that-exploits-pulse-secure-cve-2020-8218

https://www.gosecure.net/blog/2020/11/13/forget-your-perimeter-part-2-four-vulnerabilities-in-pulse-connect-secure/

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3