medium4.3
CVE-2020-8261
A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection.
Impact
A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Connect Secure | Version 9.1 |
| Ivanti | Policy Secure | Version 9.1 |
| Pulsesecure | Pulse Connect Secure | before 9.1 |
| Pulsesecure | Pulse Policy Secure | before 9.1 |