CVE:CVE-2020-15408
CNNVD:CNNVD-202007-1583
Pulse Secure Pulse Connect Secure（又名PCS，前称Juniper Junos Pulse）和Pulse Policy Secure都是美国Pulse Secure公司的产品。Pulse Connect Secure是一套SSL VPN解决方案。Pulse Policy Secure是一套网络准入控制解决方案。
Pulse Secure Pulse Connect Secure 9.1R8之前版本和Pulse Policy Secure 9.1R8之前版本中存在安全漏洞。攻击者可利用该漏洞访问管理页面控制台。
solution:Upgrade pulsesecure pulse_connect_secure to a higher version than 9.1,and avoid the version (,9.1]; Upgrade pulsesecure pulse_secure_desktop_client to a higher version than 9.1:r1.0,9.1:r2.0,9.1:r3.0,9.1:r3.1,9.1:r4.0,9.1:r4.1,9.1:r4.2,9.1:r5.0,9.1:r6.0,9.1:r7.0,and avoid the version 9.1:r1.0,9.1:r2.0,9.1:r3.0,9.1:r3.1,9.1:r4.0,9.1:r4.1,9.1:r4.2,9.1:r5.0,9.1:r6.0,9.1:r7.0