Security Advisory

CVE-2020-8256

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-29 13:41:32
Last updated 2024-11-18 16:03:30
Assigner hackerone
State PUBLISHED

Description

A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration via XML External Entity (XXE) vulnerability.