high8.1
CVE-2020-8206
An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TO…
Impact
An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TOTP.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Connect Secure | Version 9.1 |
| Pulsesecure | Pulse Connect Secure | through 9.0 |
| Ivanti | Policy Secure | Version 9.1 |
| Pulsesecure | Pulse Policy Secure | through 9.0 |