cve/2020/CVE-2020-8255.md

CVE-2020-8255

Description

A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary file reading vulnerability is fixed using encrypted URL blacklisting that prevents these messages.

POC

Reference

• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601

Github

• https://github.com/EdgeSecurityTeam/Vulnerability
• https://github.com/alphaSeclab/sec-daily-2020
• https://github.com/tzwlhack/Vulnerability