Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.
Weakness
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
References
