CVE-2022-35656

Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly.

Score

CVSS 3.0 6.8 Medium

Status

Modified - security@pega.com

Published

2022-08-22

Last modified

2024-08-03

Weaknesses

CWE-352

Affected products

• Pega Platform (Pega)
• Pega Infinity (Pegasystems)

References

• https://support.pega.com/support-doc/pega-security-advisory-d22-e22-f22-vulnerabilities-%E2%80%93-hotfix-matrix