CVE-2020-8256

State: Published
Severity: Not scored
Published: Sep 29, 2020
Updated: Nov 18, 2024
Reserved: Jan 28, 2020

Description

A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration via XML External Entity (XXE) vulnerability.

Scores

The record has no CVSS score.

Weaknesses

CWE-611 XML External Entities (XXE) (CWE-611)

Affected Products

Product	Versions
Pulse Connect Securen/a	Fixed in 9.1R8.2Affected

References

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588
https://www.gosecure.net/blog/2020/11/13/forget-your-perimeter-part-2-four-vulnerabilities-in-pulse-connect-secure/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.