CVE-2020-8248: High severity pulse secure desktop client for linux vulnerability
Published Oct 28, 2020
·Updated
A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege.
Affected Software
14 affected components
PulseSecure Pulse Secure Desktop Client Linux<9.1
PulseSecure Pulse Secure Desktop Client Linux=9.1-r1
PulseSecure Pulse Secure Desktop Client Linux=9.1-r2
PulseSecure Pulse Secure Desktop Client Linux=9.1-r3
PulseSecure Pulse Secure Desktop Client Linux=9.1-r3.1
PulseSecure Pulse Secure Desktop Client Linux=9.1-r4
PulseSecure Pulse Secure Desktop Client Linux=9.1-r4.1
PulseSecure Pulse Secure Desktop Client Linux=9.1-r4.2
PulseSecure Pulse Secure Desktop Client Linux=9.1-r5
PulseSecure Pulse Secure Desktop Client Linux=9.1-r6
PulseSecure Pulse Secure Desktop Client Linux=9.1-r7
PulseSecure Pulse Secure Desktop Client Linux=9.1-r7.1
PulseSecure Pulse Secure Desktop Client Linux=9.1-r8
PulseSecure Pulse Secure Desktop Client Linux=9.1-r8.2
Event History
Oct 28, 2020
CVE Published
via MITRE·12:40 PM
Data Sourced
via MITRE·12:40 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Pulse Secure Desktop Client vulnerability?
The vulnerability ID for this Pulse Secure Desktop Client vulnerability is CVE-2020-8248.
2
What is the severity of CVE-2020-8248?
The severity of CVE-2020-8248 is high, with a severity value of 7.8.
3
What is the affected software for CVE-2020-8248?
The affected software for CVE-2020-8248 is Pulse Secure Desktop Client (Linux) versions < 9.1R9.
4
How can local attackers exploit CVE-2020-8248?
Local attackers can exploit CVE-2020-8248 to escalate privilege.
5
How can I fix CVE-2020-8248?
To fix CVE-2020-8248, update the Pulse Secure Desktop Client (Linux) to version 9.1R9 or higher.