medium4.9
CVE-2020-8221
A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web i…
Impact
A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Connect Secure | Version 9.1 |
| Pulsesecure | Pulse Connect Secure | through 9.0 |
| Ivanti | Policy Secure | Version 9.1 |
| Pulsesecure | Pulse Policy Secure | through 9.0 |