Skip to content
OpenAdvisories
Medium WID-SEC-2025-2818 1 CVE

Pega Platform: Schwachstelle ermöglicht Offenlegung von Informationen

Published Dec 10, 2025 · Updated Dec 10, 2025 · de-DE

Vendor: Pega Product: Platform Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Pega Platform ausnutzen, um Informationen offenzulegen.

Product

Pega ist eine Plattform für Workflow-Automatisierung und KI-gestützte Entscheidungsfindung.

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-62181

    Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration where during user authentication process, a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.

    Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or…

    Pega Systems Pega Infinity

Revision history

  1. #1

    Initiale Fassung

References