CVE-2020-8219: High severity ivanti pulse connect secure vulnerability
Published Jul 30, 2020
·Updated
An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator.
Affected Software
46 affected components
PulseSecure Pulse Connect Secure<=9.0
PulseSecure Pulse Connect Secure=9.1
PulseSecure Pulse Connect Secure=9.1-r1
PulseSecure Pulse Connect Secure=9.1-r2
PulseSecure Pulse Connect Secure=9.1-r3
PulseSecure Pulse Connect Secure=9.1-r4
PulseSecure Pulse Connect Secure=9.1-r4.1
PulseSecure Pulse Connect Secure=9.1-r4.2
PulseSecure Pulse Connect Secure=9.1-r4.3
PulseSecure Pulse Connect Secure=9.1-r5
PulseSecure Pulse Connect Secure=9.1-r6
PulseSecure Pulse Connect Secure=9.1-r7
PulseSecure Pulse Policy Secure<=9.0
PulseSecure Pulse Policy Secure=9.1
PulseSecure Pulse Policy Secure=9.1-r1
PulseSecure Pulse Policy Secure=9.1-r2
PulseSecure Pulse Policy Secure=9.1-r3
PulseSecure Pulse Policy Secure=9.1-r3.1
PulseSecure Pulse Policy Secure=9.1-r4
PulseSecure Pulse Policy Secure=9.1-r4.1
PulseSecure Pulse Policy Secure=9.1-r4.2
PulseSecure Pulse Policy Secure=9.1-r5
PulseSecure Pulse Policy Secure=9.1-r6
PulseSecure Pulse Policy Secure=9.1-r7
Ivanti Connect Secure=9.1
Ivanti Connect Secure=9.1-r1
Ivanti Connect Secure=9.1-r2
Ivanti Connect Secure=9.1-r3
Ivanti Connect Secure=9.1-r4
Ivanti Connect Secure=9.1-r4.1
Ivanti Connect Secure=9.1-r4.2
Ivanti Connect Secure=9.1-r4.3
Ivanti Connect Secure=9.1-r5
Ivanti Connect Secure=9.1-r6
Ivanti Connect Secure=9.1-r7
Ivanti Policy Secure=9.1
Ivanti Policy Secure=9.1-r1
Ivanti Policy Secure=9.1-r2
Ivanti Policy Secure=9.1-r3
Ivanti Policy Secure=9.1-r3.1
Ivanti Policy Secure=9.1-r4
Ivanti Policy Secure=9.1-r4.1
Ivanti Policy Secure=9.1-r4.2
Ivanti Policy Secure=9.1-r5
Ivanti Policy Secure=9.1-r6
Ivanti Policy Secure=9.1-r7
Event History
Jul 30, 2020
CVE Published
via MITRE·12:53 PM
Data Sourced
via MITRE·12:53 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-8219?
CVE-2020-8219 is an insufficient permission check vulnerability in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator.
2
What is the severity of CVE-2020-8219?
The severity of CVE-2020-8219 is high with a CVSS score of 7.2.
3
Which software versions are affected by CVE-2020-8219?
Pulse Connect Secure versions up to 9.1R8 are affected by CVE-2020-8219.
4
How can an attacker exploit CVE-2020-8219?
An attacker can exploit CVE-2020-8219 by exploiting insufficient permission checks to change the password of a full administrator.
5
Where can I find more information about CVE-2020-8219?
You can find more information about CVE-2020-8219 at the following link: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516