CVE-2021-27654

Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.

• https://collaborate.pega.com/discussion/pega-security-advisory-c21
  Vendor Advisory
• https://collaborate.pega.com/discussion/pega-security-advisory-c21
  Vendor Advisory