Lucene search
MitreCVELIST:CVE-2019-16374HistoryAug 13, 2020 - 12:30 p.m.
CVE-2019-16374
2020-08-1312:30:26
mitre
www.cve.org
3
pega platform
ldap injection
username length
access control
Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can specify four characters of a username, followed by the * character, to bypass access control.
Related
prion
prion
Improper access control
2020-08-13 13:15:00
cve
cve
CVE-2019-16374
2020-08-13 13:15:16
nvd
nvd
CVE-2019-16374
2020-08-13 13:15:16