CVE-2025-62181

CVE-2025-62181 affects Pega Platform versions 7.1.0 through Infinity 25.1.0. The issue is a user-enumeration in the authentication process caused by a detectable response-time difference, enabling remote unauthenticated actors to determine if a username exists. The root cause relates to the depre...