by Kastro
Paper/Archive/CVE-2020-8239

CVE-2020-8239

hackerone — A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack.

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 81.0.810 × 2016.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC.

Affected

ProductAffectedFixed inSource
Pulse Secure Desktop Cient9.1R9–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refkb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601