← All advisories

High severity7.8NVD Advisory· Published Jan 28, 2022· Updated Jun 17, 2026

CVE-2021-27654

CVE-2021-27654

Description

Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.

Affected products

3

Pega/Infinity
cpe:2.3:a:pega:infinity:*:*:*:*:*:*:*:*
Range: >=8.2.1,<=8.6.1
Pega/Pega Platformllm-fuzzy
Capasystems/Pega Infinityv5
Range: 8.2.1

Patches

Vulnerability mechanics

References

1

collaborate.pega.com/discussion/pega-security-advisory-c21nvdVendor Advisory

News mentions

0

No linked articles in our index yet.