PT-2020-20394

CVE-2020-8956

·

Published

2020-10-27

·

Updated

2020-10-27

Description by

CVSS 3.1
3.8
Low
MetricsAC:L/AV:L/A:N/C:L/I:N/PR:L/S:C/UI:N
Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop Client versions 9.0Rx through 9.0R4 Pulse Secure Desktop Client versions 9.1Rx through 9.1R3
Description The issue reveals users' passwords if the Save Settings feature is enabled.
Recommendations For Pulse Secure Desktop Client versions 9.0Rx through 9.0R4, update to version 9.0R5 or later. For Pulse Secure Desktop Client versions 9.1Rx through 9.1R3, update to version 9.1R4 or later.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
CWE-521: Weak Password Requirements
Related identifiers
CVE-2020-8956
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com