RaqibCTI
CVE

CVE-2020-8260

P2
Ivanti Pulse Connect Secure Code Execution Vulnerability
Ivanti · Pulse Connect Secure
Date added (CISA)
2021-11-03
Remediation due
2022-05-03
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Pulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using uncontrolled gzip extraction.

Source: NVD ↗ · CISA KEV Catalog ↗