Default Credentials Vulnerability in Pega Platform by Pega Systems
CVE-2023-32090

9.8CRITICAL

Key Information:

Vendor

Pegasystems

Status
Pega Platform
Vendor
CVE Published:
7 August 2023

What is CVE-2023-32090?

The Pega Platform has a vulnerability whereby clients using versions 6.1 through 7.3.1 may be at risk due to the use of default credentials. This situation can lead to unauthorized access, allowing individuals to exploit the system easily. It is crucial for users to configure their authentication mechanisms securely to mitigate potential breaches associated with default operator accounts.

Affected Version(s)

Pega Platform 6.1 <= 7.3.1

References

https://support.pega.com/support-doc/pega-security-adviso...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mohamad Shokor
.