CVE-2020-8206

No fix known EPSS 3%

An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TOTP.

Published 2020-07-30 · CVE record · OSV

Products: ivanti connect_secure, pulsesecure pulse_connect_secure, ivanti policy_secure, pulsesecure pulse_policy_secure