PT-2017-11956
CVE-2017-11356
·
Published
2017-08-02
·
Updated
2017-09-08
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
PEGA Platform versions 7.2 ML0 and earlier
Description
The issue concerns a missing access control in the application distribution export functionality, allowing remote authenticated users with certain privileges to obtain sensitive configuration information.
Recommendations
For PEGA Platform versions 7.2 ML0 and earlier, consider restricting access to the application distribution export functionality to minimize the risk of exploitation until a fix is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾