IT

Tracker / CVE-2020-11580

CVE-2020-11580

Critical 9.1

An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, accepts an arbitrary SSL certificate.

Affected products and versions

pulsesecure pulse_connect_secure · … → 2020-04-06
pulsesecure pulse_policy_secure · … → 2020-04-06

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References