Vulnerabilities > CVE-2021-27653 - Unspecified vulnerability in Pega Infinity

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2021-04-01

Updated: 2022-04-25

Summary

Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead to unintended data exposure.

Part	Description	Count
Application	Pega Pega Infinity 8.1 Pega Infinity 8.2.1 Pega Infinity 8.2.2 Pega Infinity 8.2.3 Pega Infinity 8.2.4 Pega Infinity 8.2.5 Pega Infinity 8.2.6 Pega Infinity 8.2.7 Pega Infinity 8.2.8 Pega Infinity 8.3.0 Pega Infinity 8.3.1 Pega Infinity 8.3.2 Pega Infinity 8.3.3 Pega Infinity 8.3.4 Pega Infinity 8.3.5 Pega Infinity 8.3.6 Pega Infinity 8.4.0 Pega Infinity 8.4.1 Pega Infinity 8.4.2 Pega Infinity 8.4.3 Pega Infinity 8.4.4 Pega Infinity 8.4.5 Pega Infinity 8.5.1 Pega Infinity 8.5.2	24