Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Alex Munford (AlexM001)
Sprint

Sprint
US
AlexM001 Member since 2015 19 posts
Sprint
Posted: Jun 11, 2020
Last activity: Jun 12, 2020
Posted: 11 Jun 2020 17:22 EDT
Last activity: 12 Jun 2020 5:00 EDT
Closed

Critcial 7.4 Hotfixes

How can one find out specifically what a Security hotfix addresses? A recent scan flagged 2 hotfixes as missing, but there are no details on exactly what security risks they address.

Hotfixes: HFIX-62252 and HFIX-63313

Thanks.

***Edited by Moderator: Pallavi to update platform capability tags***

To see attachments, please log in.
Pega Platform 7.4
Security

Posted: 4 years ago
Posted: 12 Jun 2020 2:55 EDT
Marc Lasserre (MarcLasserre_GCS)
PEGA
Technical Account Manager
Pegasystems Inc.
FR

Hello

HFIX-62252 is to solve a security issue where it was possible to retrieve a list of operators

HFIX-63313 is to solve a security issue where it was possible to change direct invocation of an operator

I guess you can request those two and check the content before deploying.

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice