CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11581

An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to perform OS command injection attacks (against a client) via shell metacharacters to the doCustomRemediateInstructions method, because Runtime.getRuntime().exec() is used.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.393

EPSS Ranking 97.1%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 9.3

References

Products affected by CVE-2020-11581

Pulsesecure » Pulse Connect Secure » Version: N/A

cpe:2.3:a:pulsesecure:pulse_connect_secure:-
Pulsesecure » Pulse Connect Secure » Version: 7.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.1
Pulsesecure » Pulse Connect Secure » Version: 7.4

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4
Pulsesecure » Pulse Connect Secure » Version: 7.4r1.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r1.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r10.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r10.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r11.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r11.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r11.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r11.1
Pulsesecure » Pulse Connect Secure » Version: 7.4r12.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r12.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r13.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r13.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r13.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r13.1
Pulsesecure » Pulse Connect Secure » Version: 7.4r13.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r13.2
Pulsesecure » Pulse Connect Secure » Version: 7.4r13.3

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r13.3
Pulsesecure » Pulse Connect Secure » Version: 7.4r2.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r2.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r3.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r3.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r4.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r4.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r5.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r5.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r6.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r6.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r7.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r7.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r8.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r8.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r9.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r9.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r9.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r9.1
Pulsesecure » Pulse Connect Secure » Version: 7.4r9.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r9.2
Pulsesecure » Pulse Connect Secure » Version: 7.4r9.3

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r9.3
Pulsesecure » Pulse Connect Secure » Version: 8.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r1.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r1.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r1.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r1.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r10.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r10.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r13.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r13.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r13.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r13.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r15.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r15.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r15.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r15.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r16.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r16.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r16.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r16.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r17.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r17.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r2.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r2.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r3.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r3.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r3.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r3.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r3.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r3.2
Pulsesecure » Pulse Connect Secure » Version: 8.0r4.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r4.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r4.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r4.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r5.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r5.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r6.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r6.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r7.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r7.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r7.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r7.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r8.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r8.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r8.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r8.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r9.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r9.0
Pulsesecure » Pulse Connect Secure » Version: 8.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r1.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r1.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r1.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r1.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r10.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r10.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r11.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r11.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r11.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r11.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r12.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r12.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r12.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r12.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r13.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r13.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r14.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r14.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r2.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r2.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r2.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r2.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r3.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r3.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r3.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r3.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r3.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r3.2
Pulsesecure » Pulse Connect Secure » Version: 8.1r4.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r4.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r4.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r4.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r5.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r5.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r6.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r6.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r7.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r7.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r8.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r8.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r9.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r9.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r9.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r9.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r9.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r9.2
Pulsesecure » Pulse Connect Secure » Version: 8.1rx

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1rx
Pulsesecure » Pulse Connect Secure » Version: 8.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2
Pulsesecure » Pulse Connect Secure » Version: 8.2r1.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r1.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r1.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r1.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r10.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r10.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r11.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r11.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r12.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r12.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r2.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r2.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r3.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r3.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r3.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r3.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r4.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r4.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r4.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r4.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r5.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r5.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r5.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r5.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r6.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r6.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r7.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r7.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r7.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r7.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r7.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r7.2
Pulsesecure » Pulse Connect Secure » Version: 8.2r8.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r8.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r8.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r8.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r8.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r8.2
Pulsesecure » Pulse Connect Secure » Version: 8.2r9.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r9.0
Pulsesecure » Pulse Connect Secure » Version: 8.2rx

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2rx
Pulsesecure » Pulse Connect Secure » Version: 8.3

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3
Pulsesecure » Pulse Connect Secure » Version: 8.3r1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r1
Pulsesecure » Pulse Connect Secure » Version: 8.3r1.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r1.1
Pulsesecure » Pulse Connect Secure » Version: 8.3r2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r2
Pulsesecure » Pulse Connect Secure » Version: 8.3r2.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r2.1
Pulsesecure » Pulse Connect Secure » Version: 8.3r3

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r3
Pulsesecure » Pulse Connect Secure » Version: 8.3r4

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r4
Pulsesecure » Pulse Connect Secure » Version: 8.3r5

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r5
Pulsesecure » Pulse Connect Secure » Version: 8.3r5.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r5.1
Pulsesecure » Pulse Connect Secure » Version: 8.3r5.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r5.2
Pulsesecure » Pulse Connect Secure » Version: 8.3r6

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r6
Pulsesecure » Pulse Connect Secure » Version: 8.3r6.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r6.1
Pulsesecure » Pulse Connect Secure » Version: 8.3r7

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r7
Pulsesecure » Pulse Connect Secure » Version: 8.3rx

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3rx
Pulsesecure » Pulse Connect Secure » Version: 9.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0
Pulsesecure » Pulse Connect Secure » Version: 9.0r1

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r1
Pulsesecure » Pulse Connect Secure » Version: 9.0r2

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r2
Pulsesecure » Pulse Connect Secure » Version: 9.0r2.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r2.1
Pulsesecure » Pulse Connect Secure » Version: 9.0r3

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3
Pulsesecure » Pulse Connect Secure » Version: 9.0r3.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3.1
Pulsesecure » Pulse Connect Secure » Version: 9.0r3.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3.2
Pulsesecure » Pulse Connect Secure » Version: 9.0rx

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0rx
Pulsesecure » Pulse Connect Secure » Version: 9.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1
Pulsesecure » Pulse Policy Secure » Version: N/A

cpe:2.3:a:pulsesecure:pulse_policy_secure:-
Apple » Macos » Version: N/A

cpe:2.3:o:apple:macos:-
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-
Oracle » Solaris » Version: N/A

cpe:2.3:o:oracle:solaris:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11581

Products

Pricing

Contact Us