CVE-2020-15390

pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo...

CVE-2020-15390

CVE-2020-15390 affects Pega Platform (version 8.4.0.237) via the pyActivity component. The root cause is a security misconfiguration that yields improper access control through =GetWebInfo, enabling exposure of sensitive information. Documented impacts are consistent with high/severe risk (NVD re...

Pegasystem PEGA Platform 安全漏洞

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. An access control error vulnerability...