Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Tony Kasim (tonyk228)
CSAA
Senior Application Developer
CSAA
US
tonyk228 Member since 2015 9 posts
CSAA
Posted: Sep 7, 2017
Last activity: Sep 13, 2017
Posted: 7 Sep 2017 16:48 EDT
Last activity: 13 Sep 2017 7:46 EDT
Closed
Solved

Apache Strut Bug

Are we safe from this https://apple.news/AXkYoz6uZTJi2NTU2rTeuqw

Does pega use apache struts?

To see attachments, please log in.
Security

Accepted Solution

Posted: 7 years ago
Posted: 7 Sep 2017 17:22 EDT
Matthew Morency (morem) Senior Principal Cloud Security Engineer
Pegasystems Inc.
US

The vulnerability mentioned in the article comes from the use of the REST plugin for struts.  Pega 7 (or earlier versions of PRPC) does not use the REST plugin for struts.

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice