CVE-2020-12880

An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8. By manipulating a certain kernel boot parameter, it can be tricked into dropping into a root shell in a pre-install phase where the entire source code of the appliance is available and can be retrieved. (The source code is otherwise inaccessible because the appliance has its hard disks encrypted, and no root shell is available during normal operation.)

• https://kb.pulsesecure.net/?atype=saVendor Advisory
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516Vendor Advisory
• https://kb.pulsesecure.net/?atype=saVendor Advisory
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516Vendor Advisory

Published

Jul 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12873An issue was discovered in Alfresco Enterprise Content Manag…8.8
• CVE-2020-12874Veritas APTARE versions prior to 10.4 included code that byp…9.8
• CVE-2020-12875Veritas APTARE versions prior to 10.4 did not perform adequa…6.3
• CVE-2020-12876Veritas APTARE versions prior to 10.4 allowed remote users t…7.5
• CVE-2020-12877Veritas APTARE versions prior to 10.4 allowed sensitive info…7.5
• CVE-2020-12878Digi ConnectPort X2e before 3.2.30.6 allows an attacker to e…7.8
• CVE-2020-12882Submitty through 20.04.01 allows XSS via upload of an SVG do…5.4
• CVE-2020-12883Buffer over-reads were discovered in the CoAP library in Arm…9.1
• CVE-2020-12884A buffer over-read was discovered in the CoAP library in Arm…9.1
• CVE-2020-12885An infinite loop was discovered in the CoAP library in Arm M…7.5
• CVE-2020-12886A buffer over-read was discovered in the CoAP library in Arm…9.1
• CVE-2020-12887Memory leaks were discovered in the CoAP library in Arm Mbed…7.5