CVE-2023-28093

Summary

A user with a compromised configuration can start an unsigned binary as a service.

Affected Software

VendorProductVersion RangeStatus
PegasystemsRPA: Synchronization Engine3.1.1 < unspecifiedaffected
PegasystemsRPA: Synchronization Engineunspecified < 3.1.28affected

Weaknesses

  • CWE-295: CWE-295: Improper Certification Validation

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References