Discussion
1
Replies
111
Views
United Healthcare
IN
Posted: August 19, 2015
Last activity: August 20, 2015
Last activity: 20 Aug 2015 14:05 EDT
Closed
Previous releases of PRPC(below 7.1.7 verison) were found to include OpenSSL files that were vulnerable to the “Heartbleed”.
Previous releases of PRPC(below 7.1.7 verison) were found to include OpenSSL files that were vulnerable to the “Heartbleed” exploit. Does 7.1.8 version install includes OpenSSL files, also
Moderation Team has archived post,
Posted: 6 years ago
Pegasystems Inc.
US
In the Pega 7.1.8 release we provide more options to control the versions of SSL/TLS that you use in your applications. While we still do support older protocol versions that have known vulnerabilities, we proactively warn the application developer against their use and provide alternatives.
Pega continuosly evaluates our products for known and potential threats. Currently we are not aware of any SSL related vulnerabilities in Pega 7.1.8.
Do you have more details about what you found in Pega 7.1.7 that you can share?