CVE-2020-8222: Path Traversal
Published Jul 30, 2020
·Updated
A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting.
Affected Software
46 affected components
PulseSecure Pulse Connect Secure<=9.0
PulseSecure Pulse Connect Secure=9.1
PulseSecure Pulse Connect Secure=9.1-r1
PulseSecure Pulse Connect Secure=9.1-r2
PulseSecure Pulse Connect Secure=9.1-r3
PulseSecure Pulse Connect Secure=9.1-r4
PulseSecure Pulse Connect Secure=9.1-r4.1
PulseSecure Pulse Connect Secure=9.1-r4.2
PulseSecure Pulse Connect Secure=9.1-r4.3
PulseSecure Pulse Connect Secure=9.1-r5
PulseSecure Pulse Connect Secure=9.1-r6
PulseSecure Pulse Connect Secure=9.1-r7
PulseSecure Pulse Policy Secure<=9.0
PulseSecure Pulse Policy Secure=9.1
PulseSecure Pulse Policy Secure=9.1-r1
PulseSecure Pulse Policy Secure=9.1-r2
PulseSecure Pulse Policy Secure=9.1-r3
PulseSecure Pulse Policy Secure=9.1-r3.1
PulseSecure Pulse Policy Secure=9.1-r4
PulseSecure Pulse Policy Secure=9.1-r4.1
PulseSecure Pulse Policy Secure=9.1-r4.2
PulseSecure Pulse Policy Secure=9.1-r5
PulseSecure Pulse Policy Secure=9.1-r6
PulseSecure Pulse Policy Secure=9.1-r7
Ivanti Connect Secure=9.1
Ivanti Connect Secure=9.1-r1
Ivanti Connect Secure=9.1-r2
Ivanti Connect Secure=9.1-r3
Ivanti Connect Secure=9.1-r4
Ivanti Connect Secure=9.1-r4.1
Ivanti Connect Secure=9.1-r4.2
Ivanti Connect Secure=9.1-r4.3
Ivanti Connect Secure=9.1-r5
Ivanti Connect Secure=9.1-r6
Ivanti Connect Secure=9.1-r7
Ivanti Policy Secure=9.1
Ivanti Policy Secure=9.1-r1
Ivanti Policy Secure=9.1-r2
Ivanti Policy Secure=9.1-r3
Ivanti Policy Secure=9.1-r3.1
Ivanti Policy Secure=9.1-r4
Ivanti Policy Secure=9.1-r4.1
Ivanti Policy Secure=9.1-r4.2
Ivanti Policy Secure=9.1-r5
Ivanti Policy Secure=9.1-r6
Ivanti Policy Secure=9.1-r7
Event History
Jul 30, 2020
CVE Published
via MITRE·12:53 PM
Data Sourced
via MITRE·12:53 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-8222?
CVE-2020-8222 is a path traversal vulnerability in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker to perform arbitrary file reading vulnerability through Meeting.
2
What software versions are affected by CVE-2020-8222?
CVE-2020-8222 affects Pulse Connect Secure versions 9.0 and 9.1 up to and including 9.1R7.
3
How severe is CVE-2020-8222?
CVE-2020-8222 has a severity score of 6.8 (medium).
4
How can I fix CVE-2020-8222?
To fix CVE-2020-8222, upgrade Pulse Connect Secure to version 9.1R8 or later.
5
Where can I find more information about CVE-2020-8222?
You can find more information about CVE-2020-8222 [here](https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516).