Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-27651
HistoryApr 29, 2021 - 3:15 p.m.

CVE-2021-27651

2021-04-2915:15:10
CWE-287
[email protected]
web.nvd.nist.gov
3
pega infinity
password reset
bypass vulnerability
local accounts
local authentication checks

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.068

Percentile

94.0%

JSON

In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks.

Affected configurations

Nvd
Node
pegainfinityRange8.2.1–8.5.2
VendorProductVersionCPE
pegainfinity*cpe:2.3:a:pega:infinity:*:*:*:*:*:*:*:*

Related

githubexploit 2
cve 1
malwarebytes 1
seebug 1
cvelist 1
prion 1
nuclei 1
githubexploit
githubexploit
Exploit for Improper Authentication in Pega Infinity
2021-05-16 19:58:31
Exploit for Improper Authentication in Pega Infinity
2021-10-05 23:33:50
cve
cve
CVE-2021-27651
2021-04-29 15:15:10
malwarebytes
malwarebytes
Pega Infinity patches authentication vulnerability
2021-05-19 14:53:37
seebug
seebug
Pega Infinityη™»ι™†η»•θΏ‡ζΌζ΄žοΌˆCVE-2021-27651οΌ‰
2021-05-17 00:00:00
cvelist
cvelist
CVE-2021-27651
2021-04-29 14:47:20
prion
prion
Authentication flaw
2021-04-29 15:15:00
nuclei
nuclei
Pega Infinity - Authentication Bypass
2021-05-16 09:40:08

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.068

Percentile

94.0%

JSON
Related for NVD:CVE-2021-27651
githubexploit2cve1malwarebytes1seebug1cvelist1prion1nuclei1