PT-2017-11956
CVE-2017-11356
·
Publicado
2017-08-02
·
Atualizado
2017-09-08
Descrição por
CVSS 3.1
6.5
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
PEGA Platform versions 7.2 ML0 and earlier
Description
The issue concerns a missing access control in the application distribution export functionality, allowing remote authenticated users with certain privileges to obtain sensitive configuration information.
Recommendations
For PEGA Platform versions 7.2 ML0 and earlier, consider restricting access to the application distribution export functionality to minimize the risk of exploitation until a fix is available.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾