• Pega Platform 8.7.3 Remote Code Execution

    From Security Bot@2:250/1 to All on Fri Nov 4 04:22:00 2022


    Pega Platform 8.7.3 Remote Code Execution

    Pega Platform versions 8.1.0 through 8.7.3 suffer from a remote code
    execution vulnerability. If an on-premise installation of the Pega
    Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be
    possible to upload serialized payloads to attack the underlying system.
    This does not affect systems running on PegaCloud due to its design and architecture.

    https://packetstormsecurity.com/files/169480/pegaplatform810-exec.txt

    Mon, 24 Oct 2022 12:56:45 GMT
    ________________________________
    --- The information is for inforamtional purposes only.
    * Origin: Read us with http://winpoint.org JID: rs@captflint.com