CVE-2021-27653

MEDIUM

Pega platform <8.5.x - Info Disclosure

Title source: llm

Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead to unintended data exposure.

Core 2

Core References

Vendor Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 6.6

EPSS 0.0109

EPSS Percentile 61.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-284

Status published

Products (1)

pega/infinity 7.4.0 - 8.5.3

Published Apr 01, 2021

Tracked Since Feb 18, 2026