CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-26466
https://notcve.org/view.php?id=CVE-2023-26466
10 Apr 2023 — A user with non-Admin access can change a configuration file on the client to modify the Server URL. • https://support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilege • CWE-285: Improper Authorization •
CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0CVE-2023-26467
https://notcve.org/view.php?id=CVE-2023-26467
10 Apr 2023 — A man in the middle can redirect traffic to a malicious server in a compromised configuration. • https://support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilege • CWE-345: Insufficient Verification of Data Authenticity •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-28093
https://notcve.org/view.php?id=CVE-2023-28093
10 Apr 2023 — A user with a compromised configuration can start an unsigned binary as a service. • https://support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilege • CWE-295: Improper Certificate Validation •