CVE-2020-12880

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8. By manipulating a certain kernel boot parameter, it can be tricked into dropping into a root shell in a pre-install phase where the entire source code of the appliance is available and can be retrieved. (The source code is otherwise inaccessible because the appliance has its hard disks encrypted, and no root shell is available during normal operation.)

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jul 27, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-128825.4Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow.CVE-2020-128839.1Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packet CVE-2020-128849.1A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packet CVE-2020-128857.5An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets.CVE-2020-128869.1A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packet CVE-2020-128877.5Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is respon CVE-2020-128885.3The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.CVE-2020-128899.8MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case.CVE-2020-12895.4A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S CVE-2020-128906.7Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or adminis CVE-2020-128917.8AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL fil CVE-2020-128927.8An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or unauthorized code execution.