Pegasystems Rpa: Synchronization Engine
3 CVEs affecting Pegasystems Rpa: Synchronization Engine. Latest disclosed: 2023-04-10. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-26466 | High | 7.8 | 2023-04-10 | A user with non-Admin access can change a configuration file on the client to modify the Server URL. |
CVE-2023-28093 | Medium | 6.5 | 2023-04-10 | A user with a compromised configuration can start an unsigned binary as a service. |
CVE-2023-26467 | Medium | 5.4 | 2023-04-10 | A man in the middle can redirect traffic to a malicious server in a compromised configuration. |