Lucene search

[email protected]CVE-2020-8248

HistoryOct 28, 2020 - 1:15 p.m.

CVE-2020-8248

2020-10-2813:15:12

[email protected]

web.nvd.nist.gov

cve-2020-8248

pulse secure

desktop client

linux

vulnerability

privilege escalation

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege.

Affected configurations

NVD

Node

pulsesecurepulse_secure_desktop_clientRange<9.1linux

pulsesecurepulse_secure_desktop_clientMatch9.1r1linux

pulsesecurepulse_secure_desktop_clientMatch9.1r2linux

pulsesecurepulse_secure_desktop_clientMatch9.1r3linux

pulsesecurepulse_secure_desktop_clientMatch9.1r3.1linux

pulsesecurepulse_secure_desktop_clientMatch9.1r4linux

pulsesecurepulse_secure_desktop_clientMatch9.1r4.1linux

pulsesecurepulse_secure_desktop_clientMatch9.1r4.2linux

pulsesecurepulse_secure_desktop_clientMatch9.1r5linux

pulsesecurepulse_secure_desktop_clientMatch9.1r6linux

pulsesecurepulse_secure_desktop_clientMatch9.1r7linux

pulsesecurepulse_secure_desktop_clientMatch9.1r7.1linux

pulsesecurepulse_secure_desktop_clientMatch9.1r8linux

pulsesecurepulse_secure_desktop_clientMatch9.1r8.2linux

CPENameOperatorVersion
pulsesecure:pulse_secure_desktop_clientpulsesecure pulse secure desktop clientlt9.1

CPE	Name	Operator	Version
pulsesecure:pulse_secure_desktop_client	pulsesecure pulse secure desktop client	lt	9.1

CNA Affected

[
  {
    "product": "Pulse Secure Desktop Client",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "9.1R9"
      }
    ]
  }
]

References

kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2020-8248

nvd1 prion1 cvelist1