Lucene search

[email protected]CVE-2023-28094

HistoryJun 22, 2023 - 9:15 p.m.

CVE-2023-28094

2023-06-2221:15:09

CWE-1393

[email protected]

web.nvd.nist.gov

pega platform

cve-2023-28094

nvd

security

default credentials

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.3%

JSON

Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials.

Affected configurations

NVD

Node

pegapega_platformRange6.1–8.8.3

CPENameOperatorVersion
pega:pega_platformpega pega platformle8.8.3

CPE	Name	Operator	Version
pega:pega_platform	pega pega platform	le	8.8.3

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Pega Platform",
    "vendor": "Pegasystems",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "7.4",
        "versionType": "custom"
      },
      {
        "lessThan": "8.8.*",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.pega.com/support-doc/pega-security-advisory-%E2%80%93-c23-vulnerability-default-operators?

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.3%

JSON

Related for CVE-2023-28094

prion1 nvd1 cvelist1