CVE-2020-8216: 
Ivanti Connect Secure vulnerability analysis and mitigation

An information disclosure vulnerability was identified in the meeting functionality of Pulse Connect Secure versions prior to 9.1R8. The vulnerability, tracked as CVE-2020-8216, was discovered and assigned on January 28, 2020, allowing authenticated end-users to access meeting details if they possessed knowledge of the Meeting ID (CVE Mitre).

The vulnerability has been assigned a CVSS v3.1 base score indicating low severity with the following vector: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. The vulnerability is categorized under CWE-200, which relates to Information Exposure (NVD).

The vulnerability allows unauthorized access to meeting details, potentially compromising the confidentiality of meeting information when an attacker knows the Meeting ID (CVE Mitre).

The vulnerability requires network access and low privilege levels for exploitation. An authenticated user with knowledge of a Meeting ID could potentially exploit this vulnerability to access meeting details (NVD).

The vulnerability was addressed in Pulse Connect Secure version 9.1R8. Users are advised to upgrade to this version or later to mitigate the vulnerability (CVE Mitre).