CVE-2020-8260highunder attackCWE-434

CVE-2020-8260: high-severity vulnerability in Pulse Connect Secure / Pulse Policy Secure

Published · Updated

Follow this CVE+ Monitor Connect Secure+ Monitor Pulse Connect Secure / Pulse Policy Secure

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.2epss 96%
from disclosure to weaponsame day
Published on NVDOct 28
metasploitOct 26
CISA KEV+371d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

An authenticated attacker can execute arbitrary code on Pulse Connect Secure versions before 9.1R9 by exploiting improper handling of gzip-compressed files in the admin interface. This allows complete system compromise by an insider or someone with valid credentials.

Technical detail

CVE-2020-8260 is a CWE-434 (Unrestricted Upload of File with Dangerous Type) vulnerability in Pulse Connect Secure's admin web interface that permits authenticated attackers to achieve remote code execution via uncontrolled gzip extraction. The attack requires valid authentication credentials and exploits insufficient validation of decompressed file content, leading to arbitrary code execution with application privileges.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · Pulse Connect Secure / Pulse Policy Secure
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.