Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Praveen Kumar (PraveenK9751)
Larsen and Toubro infotech

Larsen and Toubro infotech
IN
PraveenK9751 Member since 2016 2 posts
Larsen and Toubro infotech
Posted: Aug 31, 2018
Last activity: Aug 31, 2018
Posted: 31 Aug 2018 7:42 EDT
Last activity: 31 Aug 2018 17:09 EDT
Closed

What is the struts framework version in Pega 7.1.9?

there was a new vulnerability released for Apache Struts.

https://cwiki.apache.org/confluence/display/WW/S2-057

https://nvd.nist.gov/vuln/detail/CVE-2018-11776

how to remediate in Pega 7.1.9 ? is there any hotfix provided by pega ?

To see attachments, please log in.
Security

Posted: 7 years ago
Posted: 31 Aug 2018 17:09 EDT
Arvind Malav (malaa) Technical Manager
Pegasystems Inc.
IN

Hi,


Struts version is Proprietary information hidden in prsysmgmt.war of PRPC 7.1.9
The security vulnerability is in Struts-2.5.16. http://struts.apache.org/announce.html#a20180822-0

Therefore, you may not require the fix on PRPC 7.1.9
However, I suggest you to raise Support ticket to get this verified by Subject matters.

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice