CVE-2017-11356

MEDIUM 6.5CVE-2017-11356 · Published 02/08/2017 · updated 17/06/2026

In short

CVE-2017-11356 is a MEDIUM (CVSS 6.5) vulnerability affecting pega platform (pega).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pega platform pega	`≤ 7.2_ml0`	No fix yet

Description

The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privileges to obtain sensitive configuration information by leveraging a missing access control.

References

seclists.org/fulldisclosure/2017/Jul/28 · Mailing List
pdn.pega.com/pegasystems-security-bulletin-cve-2017-11355-and-cve-2017-11356/pegasystems-security-bulletin-cve
exploit-db.com/exploits/42335

More vulnerabilities in pega platform

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

pega platform

pega

≤ 7.2_ml0

No fix yet

More vulnerabilities in pega platform

See all →