2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2020-8243" ,
"sourceIdentifier" : "support@hackerone.com" ,
"published" : "2020-09-30T18:15:29.070" ,
2024-01-13 05:00:28 +00:00
"lastModified" : "2024-01-13T04:43:44.307" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Analyzed" ,
"cisaExploitAdd" : "2021-11-03" ,
"cisaActionDue" : "2021-04-23" ,
"cisaRequiredAction" : "Apply updates per vendor instructions." ,
2024-01-13 05:00:28 +00:00
"cisaVulnerabilityName" : "Ivanti Pulse Connect Secure Code Execution Vulnerability" ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution."
} ,
{
"lang" : "es" ,
"value" : "Una vulnerabilidad en la interfaz de administraci\u00f3n web en Pulse Connect Secure versiones anteriores a 9.1R8.2, podr\u00eda permitir a un atacante autenticado cargar una plantilla personalizada para llevar a cabo una ejecuci\u00f3n de c\u00f3digo arbitrario"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "HIGH" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.2 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 1.2 ,
"impactScore" : 5.9
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "SINGLE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
"availabilityImpact" : "PARTIAL" ,
"baseScore" : 6.5
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.0 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-94"
}
]
} ,
{
"source" : "support@hackerone.com" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-94"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-01-13 05:00:28 +00:00
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "A07B66E0-A679-4912-8CB1-CD134713EDC7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:*" ,
"matchCriteriaId" : "6D37A6E4-D58E-444D-AF6A-15461F38E81A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:*" ,
"matchCriteriaId" : "FC2B9DA0-E32B-4125-9986-F0D3814C66E9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:*" ,
"matchCriteriaId" : "C9A5BA3E-D6B3-453D-8DDF-FF16859FD0F8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:*" ,
"matchCriteriaId" : "BAFDA618-D15D-401D-AC68-0020259FEC57"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:*" ,
"matchCriteriaId" : "D55AB5F0-132F-4C40-BF4F-684E139B774B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:*" ,
"matchCriteriaId" : "6BE937D2-8BEE-4E64-8738-F550EAD00F50"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:*" ,
"matchCriteriaId" : "9C753520-1BC6-4980-AFC9-4C2FDDF2FD18"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:*" ,
"matchCriteriaId" : "AC3863BC-3B9A-402B-A74A-149CDF717EC6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r8:*:*:*:*:*:*" ,
"matchCriteriaId" : "E3C09D51-FDA0-4D07-87D8-F527C8CBDAFB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r8.1:*:*:*:*:*:*" ,
"matchCriteriaId" : "CCE2E1C0-680F-4EFF-ACE6-A1DAFA209D24"
} ,
2023-04-24 12:24:31 +02:00
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "9.0" ,
"matchCriteriaId" : "18272F7E-A9BA-4175-B6F6-F7E550D736CE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "8E84076A-C4AB-4C41-B325-F9557080E95A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "1252710D-3A38-4C4D-8B97-1CEB6668A67B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r2:*:*:*:*:*:*" ,
"matchCriteriaId" : "C272B0B1-A08A-46D9-A8FB-5B2CF0C70A94"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r3:*:*:*:*:*:*" ,
"matchCriteriaId" : "002F211E-954E-4881-80B1-D92C77A3687D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r4:*:*:*:*:*:*" ,
"matchCriteriaId" : "648BE1FA-7B29-416E-B827-25941170AB32"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r4.1:*:*:*:*:*:*" ,
"matchCriteriaId" : "DFE6AF6A-F6C4-4463-8316-5BAB9A13452F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r4.2:*:*:*:*:*:*" ,
"matchCriteriaId" : "79B29059-9C55-455F-8B96-525BCF4E1DFE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r4.3:*:*:*:*:*:*" ,
"matchCriteriaId" : "69567696-0EED-425F-B6E9-86DE4CF6F4A5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r5:*:*:*:*:*:*" ,
"matchCriteriaId" : "C17EC167-CA23-47DD-9403-9087376963E9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r6:*:*:*:*:*:*" ,
"matchCriteriaId" : "47BCB978-25F4-4B31-9806-B3458962DC91"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r7:*:*:*:*:*:*" ,
"matchCriteriaId" : "B4FB8381-79D4-42F4-910F-C574F8F0D322"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r8:*:*:*:*:*:*" ,
"matchCriteriaId" : "96E3A807-BCFB-4A19-90D3-BDB3A5A36161"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1:r8.1:*:*:*:*:*:*" ,
"matchCriteriaId" : "A8762030-CFCE-4524-9DB1-8C4796C1A885"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "9.0" ,
"matchCriteriaId" : "B031D2AE-70BE-48BB-A9E9-0A0DAAAFF55F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.1:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "937A242A-0134-47B2-802C-894AFDC20A48"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.1:r4.3:*:*:*:*:*:*" ,
"matchCriteriaId" : "3573BE86-7BCE-41A4-92F7-C1A0DBEB2672"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588" ,
"source" : "support@hackerone.com" ,
"tags" : [
"Vendor Advisory"
]
}
]
}
