Pulse Secure Windows Client <9.1.6 (CVE-2020-13162) – exploit

Posted by Red Timmy Security on Sep 04

Hi,
we have just released an exploit for CVE-2020-13162. This vulnerability
affects the Windows Client of Pulse Secure < 9.1.6. It is a TOCTOU and
allow an attacker to escalate the privilige to NT_AUTHORITYSYSTEM.

Details about the exploit itself can be found at
https://www.redtimmy.com/privilege-escalation/pulse-secure-windows-client/
Instead details about the vulnerability have been published at…