CVE-2020-13162

Description

References

• packetstormsecurity.com/files/158117/Pulse-Secure-Client-For-Windows-Local-Privilege-Escalation.html · Third Party Advisory
• packetstormsecurity.com/files/159065/Pulse-Secure-Windows-Client-Privilege-Escalation.html · Third Party Advisory
• seclists.org/fulldisclosure/2020/Jun/25 · Mailing List
• seclists.org/fulldisclosure/2020/Sep/15 · Mailing List
• kb.pulsesecure.net · Vendor Advisory
• kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44503 · Vendor Advisory
• twitter.com/gsepcali/status/1262551597990711296 · Third Party Advisory
• twitter.com/gsepcali/status/1272927080909623297 · Third Party Advisory
• twitter.com/sepcali/status/1262551597990711296 · Third Party Advisory
• redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162

Weitere Schwachstellen in pulse secure desktop client

• CVE-2020-8263MITTEL 5.4A vulnerability in the authenticated user web interface of Pulse Connect Secure < 9.1R9 could allow attackers to conduct Cross-Site Scriptin…
• CVE-2020-8255MITTEL 4.9A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary file r…
• CVE-2020-8254HOCH 8.8A vulnerability in the Pulse Secure Desktop Client < 9.1R9 has Remote Code Execution (RCE) if users can be convinced to connect to a malicio…
• CVE-2020-8250HOCH 7.8A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege.
• CVE-2020-8249HOCH 7.8A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to perform buffer overflow.