medium6.5
CVE-2020-8220
A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrato…
Impact
A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Connect Secure | Version 9.1 |
| Pulsesecure | Pulse Connect Secure | through 9.0 |
| Ivanti | Policy Secure | Version 9.1 |
| Pulsesecure | Pulse Policy Secure | through 9.0 |