VYPR
← All advisories
Low severity3.7NVD Advisory· Published Jul 28, 2020· Updated Jun 17, 2026

CVE-2020-15408

CVE-2020-15408

Description

An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8. An authenticated attacker can access the admin page console via the end-user web interface because of a rewrite.

Affected products

13
  • Pulsesecure/Pulse Connect Secure2 versions
    cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*range: <=9.1
    • (no CPE)range: <9.1R8
  • Pulsesecure/Pulse Secure Desktop Client10 versions
    cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r1.0:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r1.0:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r2.0:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r3.0:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r3.1:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r4.0:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r5.0:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r6.0:*:*:*:*:*:*
    • cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r7.0:*:*:*:*:*:*
  • Pulse Secure/Pulse Connect Securedescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.