Question

4
Replies
149
Views
 Kiran Patibandla (KiranP98)
HSBC

HSBC
IN
KiranP98 Member since 2018 1 post
HSBC
Posted: August 25, 2018
Last activity: September 14, 2018
Posted: 25 Aug 2018 13:44 EDT
Last activity: 14 Sep 2018 12:18 EDT
Closed
Solved

Is PEGA PRPC 7.2.1(Using Websphere server) is affected with Apache Struts Vulnerability CVE-2018-11776

Hi,

We are using the PEGA PRPC 7.2.1 version and Servers are Websphere.

We just notified that ,due to Apache Struts Vulnerability CVE-2018-11776 ,our servers are getting affected.

Can you please help us ,is it impact to us and should be taken remediation.

Early help is highly appreciated.

Thanks,

Kiran

Apache Struts Vulnerability CVE-2018-11776

***Updated by moderator: Lochan to tag SR***

Security Support Case Created
Moderation Team has archived post, This thread is closed to future replies. Content and links will no longer be updated. If you have the same/similar Question, please write a new Question.
Posted: 2 years ago
Posted: 26 Aug 2018 19:44 EDT
Hemanth Inakollu (inakh)
PEGA
Associate Technical Solutions Engineer
Pegasystems Inc.
IN

Hi Kiran,


Yes, We have an ongoing request for this issue. Please raise an SR / check with your account team on this issue. You can mention Hfix-46874  as the reference.

Accepted Solution

Posted: 2 years ago
Updated: 2 years ago
Posted: 10 Sep 2018 7:40 EDT
Updated: 12 Sep 2018 21:19 EDT
Lochana Durgada Vijayakumar (Lochan_DV)
MOD
Lead Technical Documentation Specialist
Pegasystems Inc.
IN

Hello!


We see that an SR was created for the same and HFix-46844 was provided as a resolution.


Thank you!
Posted: 2 years ago
Posted: 14 Sep 2018 12:18 EDT
Rajdip Roy Chowdhury (RajdipR7)
Cognizant

Cognizant
US

Regarding the Hotfix HFix-46844 we have deployed new prsysmgmt.war in WAS ver 8.5. in our dev environment.


after deployment we have restarted Pega JVM when tried to open  SMA link we are getting Error 500: javax.servlet.ServletException: Filter [CharsetFilter]: com.pega.jmx.ui.action.CharsetFilter was found, but is corrupt


Can any one suggest me what needs to be done here ?