What’s Vulnerable › Vulnerabilities

CVE-2020-8956

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-10-27 · updated 2026-06-17
Weakness: CWE-521

Description

Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.

Affected products

Pulsesecure Pulse Secure Desktop: 9.0r1.0, 9.0r2.0, 9.0r2.1, 9.0r3.0, 9.0r3.1, 9.0r4.0 (+5)

References

Get alerted when CVE-2020-8956 or the next vulnerability affects your stack