CVE-2020-15390

pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo...

CVE-2020-15390

CVE-2020-15390 affects Pega Platform (version 8.4.0.237) via the pyActivity component. The root cause is a security misconfiguration that yields improper access control through =GetWebInfo, enabling exposure of sensitive information. Documented impacts are consistent with high/severe risk (NVD re...

PT-2021-9768

Name of the Vulnerable Software and Affected Versions Pega Platform version 8.4.0.237 Description The issue is related to an improper access control vulnerability in pyActivity, which is part of the Pega Platform. This vulnerability occurs due to a security misconfiguration and can be exploited v...

Pegasystem PEGA Platform security vulnerabilities

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. An access control error vulnerability...

CVE-2020-15390: Improper Privilege Management

pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo...