CVE-2020-11581: Command Injection
An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to perform OS command injection attacks (against a client) via shell metacharacters to the doCustomRemediateInstructions method, because Runtime.getRuntime().exec() is used.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-11581?
CVE-2020-11581 is a vulnerability in Pulse Secure Pulse Connect Secure (PCS) that allows a man-in-the-middle attacker to perform OS command injection attacks against a client.
What is the severity of CVE-2020-11581?
The severity of CVE-2020-11581 is critical (8.1).
Which software versions are affected by CVE-2020-11581?
Pulse Secure Pulse Connect Secure (PCS) versions up to and including 2020-04-06 are affected by CVE-2020-11581.
How can a man-in-the-middle attacker exploit CVE-2020-11581?
A man-in-the-middle attacker can exploit CVE-2020-11581 by performing OS command injection attacks against a client.
Are macOS, Linux, and Solaris clients vulnerable to CVE-2020-11581?
Yes, macOS, Linux, and Solaris clients are vulnerable to CVE-2020-11581 when a Host Checker policy is enforced.