CVE-2017-11356: Infoleak
Published Aug 2, 2017
·Updated
The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privileges to obtain sensitive configuration information by leveraging a missing access control.
Affected Software
1 affected component
Pega Pega Platform<=7.2_ml0
Event History
Aug 2, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11356?
CVE-2017-11356 is classified as a medium severity vulnerability.
2
How do I fix CVE-2017-11356?
To fix CVE-2017-11356, upgrade to PEGA Platform version 7.3 or later.
3
What systems are affected by CVE-2017-11356?
CVE-2017-11356 affects PEGA Platform versions 7.2 ML0 and earlier.
4
What kind of information can be accessed due to CVE-2017-11356?
CVE-2017-11356 allows remote authenticated users to access sensitive configuration information.
5
What is the cause of CVE-2017-11356?
CVE-2017-11356 is caused by a missing access control in the application distribution export functionality.