Skip to content
OpenAdvisories
High · 8.8 CVE-2021-27654 EUVD-2021-14400GHSA-pf5r-8q35-xv4w

Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.

Published Jan 28, 2022 · Updated Aug 3, 2024 · Assigned by Pega

Vendor: Pega Systems Product: Pega Infinity

Description

Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.

Affected products

VendorProductAffectedFixed
Pegasystems Pega Infinity 8.2.1 – < unspecified, unspecified – < 8.6.1 unspecified

References