nvd-json-data-feeds/CVE-2020/CVE-2020-82xx/CVE-2020-8261.json

{
  "id": "CVE-2020-8261",
  "sourceIdentifier": "support@hackerone.com",
  "published": "2020-10-28T13:15:13.137",
  "lastModified": "2020-11-03T15:12:56.317",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en Pulse Connect Secure / Pulse Policy Secure versiones anteriores a 9.1R9, es vulnerable a una inyecci\u00f3n de cookies arbitraria"
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ],
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "accessVector": "NETWORK",
          "accessComplexity": "MEDIUM",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ]
    },
    {
      "source": "support@hackerone.com",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "9.1",
              "matchCriteriaId": "43AF1D62-D827-4495-A4B0-CCA0C2BEE68F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r1:*:*:*:*:*:*",
              "matchCriteriaId": "1252710D-3A38-4C4D-8B97-1CEB6668A67B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r2:*:*:*:*:*:*",
              "matchCriteriaId": "C272B0B1-A08A-46D9-A8FB-5B2CF0C70A94"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r3:*:*:*:*:*:*",
              "matchCriteriaId": "002F211E-954E-4881-80B1-D92C77A3687D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r4:*:*:*:*:*:*",
              "matchCriteriaId": "648BE1FA-7B29-416E-B827-25941170AB32"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r5:*:*:*:*:*:*",
              "matchCriteriaId": "C17EC167-CA23-47DD-9403-9087376963E9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r6:*:*:*:*:*:*",
              "matchCriteriaId": "47BCB978-25F4-4B31-9806-B3458962DC91"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r7:*:*:*:*:*:*",
              "matchCriteriaId": "B4FB8381-79D4-42F4-910F-C574F8F0D322"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r8:*:*:*:*:*:*",
              "matchCriteriaId": "96E3A807-BCFB-4A19-90D3-BDB3A5A36161"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "9.1",
              "matchCriteriaId": "45F30A80-665D-4726-983C-36FED0CBF6E1"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.1:r1:*:*:*:*:*:*",
              "matchCriteriaId": "1A99A84F-1E38-4B2E-B482-41E975D2B992"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.1:r2:*:*:*:*:*:*",
              "matchCriteriaId": "6A1B7EB7-57CA-4578-8F95-6FE90C41C70A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.1:r3:*:*:*:*:*:*",
              "matchCriteriaId": "3CA870E8-C3B6-49AC-8905-B747B97E17B2"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.1:r4:*:*:*:*:*:*",
              "matchCriteriaId": "4C37ACCA-84F7-4D20-9695-2B028791967A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.1:r5:*:*:*:*:*:*",
              "matchCriteriaId": "2D91B4D9-54B5-4D5D-BC11-D5A9E2A8E518"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.1:r6:*:*:*:*:*:*",
              "matchCriteriaId": "C768F191-8685-4723-B0B4-5D6DA97318DD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.1:r7:*:*:*:*:*:*",
              "matchCriteriaId": "CF6EB502-E2B1-4D8B-ACE7-6C998D29DBE8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.1:r8:*:*:*:*:*:*",
              "matchCriteriaId": "1EE141EA-2EF9-4229-B618-59853628743A"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601",
      "source": "support@hackerone.com",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}