CVE-2022-24082

CRITICAL

Pega Platform 8.1.0 - Remote Code Execution (RCE)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-24082 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.

Description

If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to upload serialized payloads to attack the underlying system. This does not affect systems running on PegaCloud due to its design and architecture.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

Pega Infinity

Browse Pegasystems / Pega Infinity
CVE List8.1.0affected
Before 8.7.3affected

Proofs of concept

1

Catalogued exploits

ExploitDBPega Platform 8.1.0 - Remote Code Execution (RCE)ExploitDB exploitby Marcin WolakNot analyzed1 file
ExploitDB
PoC details

References

3