CVE-2021-27654

Forgotten password reset functionality for local accounts can be used to bypass local authentication checks...

CVE-2021-27654

Forgotten password reset functionality for local accounts can be used to bypass local authentication checks...

CVE-2021-27654

CVE-2021-27654 affects Pegasystems Pega. The vulnerability arises from a forgotten password reset functionality for local accounts that can bypass local authentication checks. Public data shows CVSS details: CVSS v3.1 base score 7.8 (HIGH) with LOCAL access, LOW attack complexity, privileges requ...