2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2020-8216" ,
"sourceIdentifier" : "support@hackerone.com" ,
"published" : "2020-07-30T13:15:11.707" ,
2024-11-23 13:10:58 +00:00
"lastModified" : "2024-11-21T05:38:31.307" ,
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to find meeting details, if they know the Meeting ID."
} ,
{
"lang" : "es" ,
"value" : "Una vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n en la reuni\u00f3n de Pulse Connect Secure versiones anteriores a 9.1R8, permiti\u00f3 a usuarios finales autenticados encontrar detalles de la reuni\u00f3n, si conocen el ID de Reuni\u00f3n"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" ,
2024-11-23 13:10:58 +00:00
"baseScore" : 4.3 ,
"baseSeverity" : "MEDIUM" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "NONE" ,
2024-11-23 13:10:58 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 1.4
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N" ,
2024-11-23 13:10:58 +00:00
"baseScore" : 4.0 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "SINGLE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "NONE" ,
2024-11-23 13:10:58 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
2024-11-23 13:10:58 +00:00
"source" : "support@hackerone.com" ,
"type" : "Secondary" ,
2023-04-24 12:24:31 +02:00
"description" : [
{
"lang" : "en" ,
2024-11-23 13:10:58 +00:00
"value" : "CWE-200"
2023-04-24 12:24:31 +02:00
}
]
} ,
{
2024-11-23 13:10:58 +00:00
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
2023-04-24 12:24:31 +02:00
"description" : [
{
"lang" : "en" ,
2024-11-23 13:10:58 +00:00
"value" : "NVD-CWE-noinfo"
2023-04-24 12:24:31 +02:00
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "4F450898-0B06-4073-9B76-BF22F68BD14F"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B21C181-DC49-4EBD-9932-DBB337151FF7"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*" ,
"matchCriteriaId" : "4FEFC4B1-7350-46F9-80C1-42F5AE06142F"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*" ,
"matchCriteriaId" : "DB7A6D62-6576-4713-9BF4-11068A72E8B7"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*" ,
"matchCriteriaId" : "843BC1B9-50CC-4F8F-A454-A0CEC6E92290"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*" ,
"matchCriteriaId" : "D5355372-03EA-46D7-9104-A2785C29B664"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*" ,
"matchCriteriaId" : "3DE32A0C-8944-4F51-A286-266055CA4B2F"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*" ,
"matchCriteriaId" : "0349A0CC-A372-4E51-899E-D7BA67876F4B"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*" ,
"matchCriteriaId" : "93D1A098-BD77-4A7B-9070-A764FB435981"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*" ,
"matchCriteriaId" : "3CCC2D7B-F835-45EC-A316-2F0C5F2CF565"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*" ,
"matchCriteriaId" : "AD812596-C77C-4129-982F-C22A25B52126"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-02-27 23:00:29 +00:00
"criteria" : "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "9.0" ,
"matchCriteriaId" : "18272F7E-A9BA-4175-B6F6-F7E550D736CE"
2023-04-24 12:24:31 +02:00
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2024-01-16 21:00:29 +00:00
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "6418A649-3A63-40CC-BD7C-309B3B0B2595"
} ,
2023-04-24 12:24:31 +02:00
{
"vulnerable" : true ,
2024-01-13 05:00:28 +00:00
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "A07B66E0-A679-4912-8CB1-CD134713EDC7"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-01-13 05:00:28 +00:00
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:*" ,
"matchCriteriaId" : "6D37A6E4-D58E-444D-AF6A-15461F38E81A"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-01-13 05:00:28 +00:00
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:*" ,
"matchCriteriaId" : "FC2B9DA0-E32B-4125-9986-F0D3814C66E9"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-01-13 05:00:28 +00:00
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r3.1:*:*:*:*:*:*" ,
"matchCriteriaId" : "38A0D7CF-7D55-4933-AE8C-36006D6779E1"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-01-13 05:00:28 +00:00
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:*" ,
"matchCriteriaId" : "C9A5BA3E-D6B3-453D-8DDF-FF16859FD0F8"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-01-13 05:00:28 +00:00
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:*" ,
"matchCriteriaId" : "BAFDA618-D15D-401D-AC68-0020259FEC57"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-01-13 05:00:28 +00:00
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:*" ,
"matchCriteriaId" : "D55AB5F0-132F-4C40-BF4F-684E139B774B"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-01-13 05:00:28 +00:00
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:*" ,
"matchCriteriaId" : "6BE937D2-8BEE-4E64-8738-F550EAD00F50"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-01-13 05:00:28 +00:00
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:*" ,
"matchCriteriaId" : "9C753520-1BC6-4980-AFC9-4C2FDDF2FD18"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-01-13 05:00:28 +00:00
"criteria" : "cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:*" ,
"matchCriteriaId" : "AC3863BC-3B9A-402B-A74A-149CDF717EC6"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
2024-01-13 05:00:28 +00:00
"criteria" : "cpe:2.3:a:pulsesecure:pulse_policy_secure:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "9.0" ,
"matchCriteriaId" : "B031D2AE-70BE-48BB-A9E9-0A0DAAAFF55F"
2023-04-24 12:24:31 +02:00
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516" ,
"source" : "support@hackerone.com" ,
"tags" : [
"Vendor Advisory"
]
2024-11-23 13:10:58 +00:00
} ,
{
"url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}