Privilege escalation

Storage Spaces Direct Elevation of Privilege Vulnerability...

CVE-2019-16387

PEGA Platform 8.3.0 is vulnerable via a direct request to prweb/sso/random_token/!STANDARD?pyActivity=Data-Admin-DB-Name.DBSchema_ListDatabases. This allows a low-privilege account to perform actions and retrieve data that should be admin-only. PT-2019-14652 specifies the vulnerability path and n...