CVE-2020-8956: Pulse Secure Desktop

Low severity, CVSS 3.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.

Affected products

• Pulse Secure Pulse Secure Desktop: version 9.0r1.0 only; version 9.0r2.0 only; version 9.0r2.1 only; version 9.0r3.0 only; version 9.0r3.1 only; version 9.0r4.0 only; …

Published 2020-10-27. Last modified 2026-06-17.