CVE-2020-8956

Low

Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.

mitre·CWE-521·Published 2020-10-27

CVSS

3.3

EPSS

0.01

KEV

Exploits

cve.orgen

134 chars

Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.

NVDen

134 chars

Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.

Pulse Secure Desktop Client versiones 9.0Rx anteriores a 9.0R5 y versiones 9.1Rx anteriores a 9.1R4 en Windows, revela unas contraseñas de unos usuarios si Save Settings está habilitado

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	1.9	3.4	2.9	AV:L/AC:M/Au:N/C:P/I:N/A:N
3.0	Primary	cve.org	3.8	—	—	CVSS:3.0/AC:L/AV:L/A:N/C:L/I:N/PR:L/S:C/UI:N
3.0	Primary	cve.org	3.8	—	—	CVSS:3.0/AC:L/AV:L/A:N/C:L/I:N/PR:L/S:C/UI:N
3.0	Secondary	NVD	3.8	2.0	1.4	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
3.1	Primary	NVD	3.3	1.8	1.4	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N