Exposures › CVE-2020-8243

CVE-2020-8243

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2021-11-03

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-8243

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to upload a custom template to perform code execution.

Players implicated

Ivanti · vendor Pulse Connect Secure · product

Description

Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to upload a custom template to perform code execution.

Affected FedRAMP products 2 in the catalog

Product	Provider	Status	Match
Ivanti Neurons for ITSM (Formerly Service Manager)	Ivanti	Authorized	vendor-exact · 0.90
Ivanti Neurons for MDM (Formerly MobileIron)	Ivanti	Authorized	vendor-exact · 0.90