CVE-2020-8221: 
Ivanti Connect Secure vulnerability analysis and mitigation

CVE-2020-8221 is a path traversal vulnerability discovered in Pulse Connect Secure versions prior to 9.1R8. The vulnerability was identified and disclosed in July 2020, affecting the administrator web interface of the Pulse Connect Secure VPN solution (NVD).

The vulnerability allows an authenticated attacker with administrative access to read arbitrary files via the administrator web interface. This path traversal vulnerability exists in versions of Pulse Connect Secure before version 9.1R8 (NVD, Register).

The vulnerability enables authenticated attackers with administrative access to read arbitrary files on the system through the administrator web interface, potentially exposing sensitive information and system configurations (NVD).

The vulnerability requires authentication with administrative privileges to be exploited. The attacker must have valid administrator credentials to access the web interface before being able to exploit the path traversal vulnerability (Register).

The vulnerability has been addressed in Pulse Connect Secure version 9.1R8. Organizations are advised to upgrade to this version or later to protect against this security issue (Register).