critical9.8
CVE-2021-27651
In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks.
Impact
In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pega | Infinity | from 8.2.1 through 8.5.2 |