CVE-2020-13162

概要

参考情報

• packetstormsecurity.com/files/158117/Pulse-Secure-Client-For-Windows-Local-Privilege-Escalation.html · Third Party Advisory
• packetstormsecurity.com/files/159065/Pulse-Secure-Windows-Client-Privilege-Escalation.html · Third Party Advisory
• seclists.org/fulldisclosure/2020/Jun/25 · Mailing List
• seclists.org/fulldisclosure/2020/Sep/15 · Mailing List
• kb.pulsesecure.net · Vendor Advisory
• kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44503 · Vendor Advisory
• twitter.com/gsepcali/status/1262551597990711296 · Third Party Advisory
• twitter.com/gsepcali/status/1272927080909623297 · Third Party Advisory
• twitter.com/sepcali/status/1262551597990711296 · Third Party Advisory
• redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162 · Exploit

pulse secure desktop client のその他の脆弱性

• CVE-2020-8263中 5.4A vulnerability in the authenticated user web interface of Pulse Connect Secure < 9.1R9 could allow attackers to conduct Cross-Site Scriptin…
• CVE-2020-8255中 4.9A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary file r…
• CVE-2020-8254高 8.8A vulnerability in the Pulse Secure Desktop Client < 9.1R9 has Remote Code Execution (RCE) if users can be convinced to connect to a malicio…
• CVE-2020-8250高 7.8A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege.
• CVE-2020-8249高 7.8A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to perform buffer overflow.