[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWncwCoJ5IAmvE82veOp4Qmro8YQxBQxXRiTuq1WJEKo":3,"g5a-risk:CVE-2020-13162":264},{"success":4,"data":5,"meta":262},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":26,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":64,"references":65,"referencesCount":126,"weaknesses":127,"weaknessesCount":27,"isActivelyExploited":136,"cisaInfo":26,"otxData":26,"relatedBlogPosts":137,"seoMetadata":138,"configurations":163,"relatedVendorCves":260,"notableEvents":261},"CVE-2020-13162","What is CVE-2020-13162?","A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows (which runs as NT AUTHORITY\u002FSYSTEM) allows unprivileged users to run a Microsoft Installer executable with elevated privileges.","A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows (which runs as...","2020-06-16T20:15:13.38","2025-05-05T17:15:58.69",7,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":33,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","HIGH","LOW","NONE","UNCHANGED",null,1,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[34],{"Source":17,"Type":18,"CVSSData":35,"BaseSeverity":38,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":38,"Authentication":24,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",6.9,3.4,10,0.00793,[43,43,43,43,43,43,43],"High",[47,52,55,58,62],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"pulsesecure","pulse_secure_desktop_client","5.3","cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3:r1.0:*:*:*:windows:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"9.0","cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.0:r1.0:*:*:*:windows:*:*",{"vendor":48,"product":49,"version":56,"criteria":57,"vulnerable":4},"9.1","cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r1.0:*:*:*:windows:*:*",{"vendor":48,"product":59,"version":60,"criteria":61,"vulnerable":4},"pulse_secure_installer_service","8.3","cpe:2.3:a:pulsesecure:pulse_secure_installer_service:8.3:*:*:*:*:windows:*:*",{"vendor":48,"product":59,"version":56,"criteria":63,"vulnerable":4},"cpe:2.3:a:pulsesecure:pulse_secure_installer_service:9.1:*:*:*:*:windows:*:*",5,[66,72,75,80,83,88,91,95,98,101,106,108,110,112,114,116,118,120,122,124],{"url":67,"source":68,"tags":69},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F158117\u002FPulse-Secure-Client-For-Windows-Local-Privilege-Escalation.html","Packetstormsecurity",[70,71],"Third Party Advisory","VDB Entry",{"url":73,"source":68,"tags":74},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F159065\u002FPulse-Secure-Windows-Client-Privilege-Escalation.html",[70,71],{"url":76,"source":77,"tags":78},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2020\u002FJun\u002F25","Seclists",[79,70],"Mailing List",{"url":81,"source":77,"tags":82},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2020\u002FSep\u002F15",[79,70],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fkb.pulsesecure.net\u002F?atype=sa","Pulsesecure",[87],"Vendor Advisory",{"url":89,"source":85,"tags":90},"https:\u002F\u002Fkb.pulsesecure.net\u002Farticles\u002FPulse_Security_Advisories\u002FSA44503",[87],{"url":92,"source":93,"tags":94},"https:\u002F\u002Ftwitter.com\u002Fgsepcali\u002Fstatus\u002F1262551597990711296","Twitter",[70],{"url":96,"source":93,"tags":97},"https:\u002F\u002Ftwitter.com\u002Fgsepcali\u002Fstatus\u002F1272927080909623297",[70],{"url":99,"source":93,"tags":100},"https:\u002F\u002Ftwitter.com\u002Fsepcali\u002Fstatus\u002F1262551597990711296",[70],{"url":102,"source":103,"tags":104},"https:\u002F\u002Fwww.redtimmy.com\u002Fprivilege-escalation\u002Fpulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162\u002F","Redtimmy",[105,70],"Exploit",{"url":67,"source":68,"tags":107},[70,71],{"url":73,"source":68,"tags":109},[70,71],{"url":76,"source":77,"tags":111},[79,70],{"url":81,"source":77,"tags":113},[79,70],{"url":84,"source":85,"tags":115},[87],{"url":89,"source":85,"tags":117},[87],{"url":92,"source":93,"tags":119},[70],{"url":96,"source":93,"tags":121},[70],{"url":99,"source":93,"tags":123},[70],{"url":102,"source":103,"tags":125},[105,70],20,[128],{"id":129,"name":130,"description":131,"extendedDescription":132,"status":133,"abstraction":134,"structure":135},"CWE-367","Time-of-check Time-of-use (TOCTOU) Race Condition","The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.","This weakness can be security-relevant when an attacker can influence the state of the resource between check and use. This can happen with shared resources such as files, memory, or even variables in multithreaded programs.","Incomplete","Base","Simple",false,[],{"title":139,"metaDescription":140,"keywords":141,"canonicalUrl":142,"structuredData":143},"What is CVE-2020-13162? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-13162, a high severity cyber security vulnerability from 2020. A time-of-check time-of-use vulnerability in PulseSecureSer...","CVE-2020-13162, CVE-2020-13162 vulnerability, CVE-2020-13162 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, pulsesecure security, pulse_secure_desktop_client vulnerability, pulse_secure_installer_service vulnerability","\u002Fwhat-is\u002Fcve-2020-13162",{"@context":144,"@type":145,"headline":139,"description":140,"datePublished":10,"dateModified":11,"author":146,"publisher":150,"about":154,"mainEntityOfPage":158,"articleSection":161,"keywords":162},"https:\u002F\u002Fschema.org","TechArticle",{"@type":147,"name":148,"url":149},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":147,"name":148,"url":149,"logo":151},{"@type":152,"url":153},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":155,"name":6,"description":156,"additionalType":157},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":159,"@id":160},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-13162","Cybersecurity","CVE-2020-13162, CVE-2020-13162 vulnerability, CVE-2020-13162 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[164],{"Operator":26,"Negate":26,"Nodes":165},[166],{"Operator":167,"Negate":26,"CPEMatch":168},"OR",[169,171,174,177,180,183,186,189,192,195,198,200,203,206,209,212,215,218,221,224,226,229,232,235,238,241,244,247,250,253,255,257],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":170,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FC05FD06-81E7-48E2-887B-A71EEB68B96C",{"Vulnerable":4,"Criteria":172,"MatchCriteriaID":173,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3:r1.1:*:*:*:windows:*:*","B7395FE6-4254-4271-986D-14DA838175AC",{"Vulnerable":4,"Criteria":175,"MatchCriteriaID":176,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3:r2.0:*:*:*:windows:*:*","F43B3D72-D466-42EE-A44F-2C0E618046A6",{"Vulnerable":4,"Criteria":178,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3:r3.0:*:*:*:windows:*:*","819CD1D2-4246-4B5E-BB02-ADDC3E59DA83",{"Vulnerable":4,"Criteria":181,"MatchCriteriaID":182,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3:r4.1:*:*:*:windows:*:*","C71804A0-0D29-4C7A-A3CD-0A85671F2569",{"Vulnerable":4,"Criteria":184,"MatchCriteriaID":185,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3:r4.2:*:*:*:windows:*:*","71F569FA-A6B0-4F7F-BB30-1D18435D2139",{"Vulnerable":4,"Criteria":187,"MatchCriteriaID":188,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3:r5.0:*:*:*:windows:*:*","84456124-EE16-415F-B857-A6A6865DDD14",{"Vulnerable":4,"Criteria":190,"MatchCriteriaID":191,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3:r5.2:*:*:*:windows:*:*","07D603F2-B987-4539-B62B-E503F4A37D0F",{"Vulnerable":4,"Criteria":193,"MatchCriteriaID":194,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3:r6.0:*:*:*:windows:*:*","4E1987FB-BC32-4E6E-8F58-BACEE03A182E",{"Vulnerable":4,"Criteria":196,"MatchCriteriaID":197,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:5.3:r7.0:*:*:*:windows:*:*","4755D673-A0F2-407E-BC4B-DD9D653DE008",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5D453E55-2173-486D-9872-3586B72DD707",{"Vulnerable":4,"Criteria":201,"MatchCriteriaID":202,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.0:r2:*:*:*:windows:*:*","D5E28726-946B-4AD5-A94C-674B2EE7C87F",{"Vulnerable":4,"Criteria":204,"MatchCriteriaID":205,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.0:r2.1:*:*:*:windows:*:*","42C0631C-3BCD-428A-B54F-BA1848E1FAF5",{"Vulnerable":4,"Criteria":207,"MatchCriteriaID":208,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.0:r3:*:*:*:windows:*:*","18F0D950-61A9-48C7-8B13-66F8BCD807FD",{"Vulnerable":4,"Criteria":210,"MatchCriteriaID":211,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.0:r3.2:*:*:*:windows:*:*","C434F090-CC8F-4AE2-B78A-3B9AE8E5FABE",{"Vulnerable":4,"Criteria":213,"MatchCriteriaID":214,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.0:r4:*:*:*:windows:*:*","5589243F-28FA-463E-A4EE-796E341A9C5C",{"Vulnerable":4,"Criteria":216,"MatchCriteriaID":217,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.0:r4.0:*:*:*:windows:*:*","A82F965F-E64E-4FA7-93E2-9539F0305CA1",{"Vulnerable":4,"Criteria":219,"MatchCriteriaID":220,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.0:r5.0:*:*:*:windows:*:*","18FA2EB1-C30E-4C21-ACAB-57790B229532",{"Vulnerable":4,"Criteria":222,"MatchCriteriaID":223,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.0:r6.0:*:*:*:windows:*:*","26B93148-966F-4CAE-9866-A56F76ACB2D6",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F20F27F1-A7D1-43E1-87E1-DB14225B6AE6",{"Vulnerable":4,"Criteria":227,"MatchCriteriaID":228,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r2.0:*:*:*:windows:*:*","754FA0D5-7EB7-40EE-8B01-4F199C1C2F8D",{"Vulnerable":4,"Criteria":230,"MatchCriteriaID":231,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r3.0:*:*:*:windows:*:*","BE5AB91A-ECB4-4325-ACB1-E0EE2DD58E1E",{"Vulnerable":4,"Criteria":233,"MatchCriteriaID":234,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r3.1:*:*:*:windows:*:*","75017203-FA52-4C5D-9B9C-E38F26852BB2",{"Vulnerable":4,"Criteria":236,"MatchCriteriaID":237,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r4.0:*:*:*:windows:*:*","88BD9C9A-AFD3-40D5-B01D-C45EA5FFC3AC",{"Vulnerable":4,"Criteria":239,"MatchCriteriaID":240,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r4.1:*:*:*:windows:*:*","D16AD2E8-9C7D-4EA2-8AF1-881546E97D75",{"Vulnerable":4,"Criteria":242,"MatchCriteriaID":243,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r4.2:*:*:*:windows:*:*","FFB49374-0F24-41BA-BC44-51DC22D27B0B",{"Vulnerable":4,"Criteria":245,"MatchCriteriaID":246,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r5.0:*:*:*:windows:*:*","495D15BC-1721-47FF-AE65-C738989AE8E9",{"Vulnerable":4,"Criteria":248,"MatchCriteriaID":249,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r6.0:*:*:*:windows:*:*","95FBACD3-EE26-406D-8D93-BF002DB08F16",{"Vulnerable":4,"Criteria":251,"MatchCriteriaID":252,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r7.0:*:*:*:windows:*:*","AAA0F785-EF43-4E4A-BC29-6D98AA70EF8B",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":254,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"28CA5CFF-88C2-4FB8-8803-428E2CD7E30F",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":256,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F54BB7FC-5904-4A0E-A997-F93FF647882B",{"Vulnerable":4,"Criteria":258,"MatchCriteriaID":259,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:pulsesecure:pulse_secure_installer_service:9.1:r5.0:*:*:*:windows:*:*","A39B2448-57FB-4407-AE46-F50CEB4F8709",[],[],{"lastModified":11,"cacheTime":263,"version":36},1792243877602,{"score":265,"band":266,"action":267,"scoredAt":268},42,"Medium","Plan remediation","2026-10-16T06:48:48.221159+00:00"]