{"vulnerability": "CVE-2020-8239", "sightings": [{"uuid": "71430be5-7f44-4f2d-a7c5-cd0a6cba3205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8239", "type": "seen", "source": "https://t.me/cibsecurity/15683", "content": "\u203c CVE-2020-8239 \u203c\n\nA vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-28T15:31:29.000000Z"}, {"uuid": "58de4086-091e-4576-8e7a-6584a9278db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8239", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1987", "content": "#exploit\nPulse Secure Vulns:\n1. CVE-2020-8260 - Pulse Connect Secure - RCE via Uncontrolled Gzip Extraction\nhttps://research.nccgroup.com/2020/10/26/technical-advisory-pulse-connect-secure-rce-via-uncontrolled-gzip-extraction-cve-2020-8260\n\n2. CVE-2020-8239, CVE-2020-8241 - Pulse Secure VPN mitm (PoC)\nhttps://github.com/withdk/pulse-secure-vpn-mitm-research", "creation_timestamp": "2022-05-27T13:24:40.000000Z"}]}