high7.2
CVE-2020-8219
An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator.
Impact
An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Connect Secure | Version 9.1 |
| Pulsesecure | Pulse Connect Secure | through 9.0 |
| Ivanti | Policy Secure | Version 9.1 |
| Pulsesecure | Pulse Policy Secure | through 9.0 |