Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Tony Kasim (tonyk228)
CSAA
Senior Application Developer
CSAA
US
tonyk228 Member since 2015 9 posts
CSAA
Posted: Sep 7, 2017
Last activity: Sep 13, 2017
Posted: 7 Sep 2017 16:48 EDT
Last activity: 13 Sep 2017 7:46 EDT
Closed
Solved

Apache Strut Bug

Are we safe from this https://apple.news/AXkYoz6uZTJi2NTU2rTeuqw

Does pega use apache struts?

To see attachments, please log in.
Security

Accepted Solution

Posted: 8 years ago
Posted: 7 Sep 2017 17:22 EDT
Matthew Morency (morem) Senior Principal Cloud Security Engineer
Pegasystems Inc.
US

The vulnerability mentioned in the article comes from the use of the REST plugin for struts.  Pega 7 (or earlier versions of PRPC) does not use the REST plugin for struts.

To see attachments, please log in.

Related content:

Related content has not currently been identified for this post.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice