CVE-2020-8206 - AskarLabs CVE Database

CVE-2020-8206

Vendor N/A

Product Pulse Connect Secure

Weakness CWE-287 · Improper authentication

Published July 30, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TOTP.

Key dates

02Disclosure timeline

July 30, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8206 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2026-33409 Parse Server: Auth provider validation bypass on login via partial authData CVE-2024-51996 Symphony has an Authentication Bypass via RememberMe CVE-2023-33190 Improperly configured permissions in Sealos CVE-2023-1460 SourceCodester Online Pizza Ordering System Password Change improper authentication CVE-2023-24831 Apache IoTDB grafana-connector Login Bypass Vulnerability