The 2020 Pwnie Nominee For Best Privilege Escalation Bug

Pulse Connect Secure, Pulse Policy Secure, Pulse Secure Desktop Client RCE

David Kierznowski

Multiple vulnerablities were identifed in Pulse Connect Secure / Pulse Policy Secure and Pulse Secure Desktop Client 9.1R9 which can allow local/remote attackers to achieve arbitrary code execution.

SA44601 – 2020-10: Security Bulletin