ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2017-11356

—
CVSS 3.0
6.5 medium
EPSS
4%p88
Published
()
Modified
Description

The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privileges to obtain sensitive configuration information by leveraging a missing access control.

Vendors
pega
Products
pega platform
Weakness
CWE-200
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news

No ingested article mentions this CVE yet.