PT-2020-12696 · Pulse Secure · Pulse Connect Secure

Giulio · Published 2020-04-06 · Updated 2021-09-16 · CVE-2020-11580

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Pulse Secure Pulse Connect Secure (PCS) versions prior to 2020-04-06

Description An issue was discovered where the applet in tncc.jar accepts an arbitrary SSL certificate when a Host Checker policy is enforced on macOS, Linux, and Solaris clients.

Recommendations For Pulse Secure Pulse Connect Secure (PCS) versions prior to 2020-04-06, consider disabling the Host Checker policy as a temporary workaround until a patch is available. Restrict access to the tncc.jar applet to minimize the risk of exploitation.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2020-11580

Affected Products

Pulse Connect Secure

References · 5

• 🔥 https://git.lsd.cat/g/pulse-host-checker-rce · Exploit
• https://osv.dev/vulnerability/CVE-2020-11580 · Vendor Advisory
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44426 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11580 · Security Note
• https://t.me/cvenotify/2442 · Telegram Post