Question
3
Replies
48
Views
E-Pragati
E-Pragati
IN
E-Pragati
Posted: August 17, 2020
Last activity: September 3, 2020
Last activity: 3 Sep 2020 4:51 EDT
Missing Access Control Vulnerability in Pega
Pega platform has a access control vulnerability which allows attacker to gain access to internal resources.
An attacker can gain access to configuration files and also has access to create queries.
Access the URL /ServicesExport/configurations.zip file followed by token as shown in the URL
It is recommended to restrict...
***Edited by Moderator: Pallavi to update platform capability tags***
***Edited by Moderator Marissa to update General to Product***
Posted: 10 months ago
PEGA
Pegasystems Inc.
FR
Hello,
What platform version is it? Have you been trough the following: https://community.pega.com/knowledgebase/articles/security/84/security-checklist
Posted: 10 months ago
E-Pragati
E-Pragati
IN
7.3.1 Version
Posted: 9 months ago
PEGA
Pegasystems Inc.
FR
I think most of the security points on provided article are still valid on Pega 7.3.1