VYPR
← All advisories
High severity8.1NVD Advisory· Published Jul 30, 2020· Updated Jun 17, 2026

CVE-2020-8206

CVE-2020-8206

Description

An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TOTP.

Affected products

26
  • Ivanti/Connect Secure11 versions
    cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*
  • Ivanti/Policy Secure11 versions
    cpe:2.3:a:ivanti:policy_secure:9.1:-:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:ivanti:policy_secure:9.1:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r3.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:*
  • Pulsesecure/Pulse Connect Secure2 versions
    cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*range: <=9.0
    • (no CPE)range: <9.1RB
  • Pulsesecure/Policy Secure
    cpe:2.3:a:pulsesecure:pulse_policy_secure:*:*:*:*:*:*:*:*
    Range: <=9.0
  • Pulse Connect Secure/Pulse Connect Securedescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.