Description (CNA)
Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Pegasystems / Pega Infinity | affected 8.3.0 before Infinity 25.1.3 |
CWE
CWE-639
References
- https://support.pega.com/support-doc/pega-security-advisory-i25-vulnerability-remediation-note
- https://support.pega.com/support-doc/pega-security-advisory-h26-vulnerability-remediation-note
ADP enrichment
No English description supplied.
No references supplied.