Question
Hazelcast CVE-2022-36437
Hi Pega Support team,
In response to an issue that occurred with Hazelcast CVE-2022-36437 recently.
Is there any documentation on how to change the Hazelcast port in the Pega application, step by step?
Note: The application that I use uses Pega version 8.1.3
Updated: 3 Apr 2023 6:28 EDT
Pegasystems Inc.
GB
Hello @RahmatS8,
As far as I know, there is no hotfix for Hazelcast CVE-2022-36437 vulnerability for 8.1.3. Please log a ticket in service portal to get advice on how to address it.
Pt Anabatic Technologies Tbk
ID
@MahesanVasudevan Thank you for the response, regarding the hazelcast itself, the impact it has on Pega? Especially for pega version 8.1.3
Pegasystems Inc.
US
@RahmatS8 re: how to change the Hazelcast port in the Pega application
To override the default port range, set a different value for the initialization/cluster/ports setting in the prconfig.xml file
More info is available here: https://support.pega.com/support-doc/managing-clusters-hazelcast
Pt Anabatic Technologies Tbk
ID
@PhilipShannon Thank you for the response, I have also received information regarding what you provided. Once we've implemented it, is there any way we can test the changes that have been made? (so I can see the before after what happened).
Pegasystems Inc.
US
You should be able to see the ports being used by each cluster member, within the logfile PegaCLUSTER.log, for example:
PT Anabatic Technologies
ID
Hello @shanp, Thank you for the response and i have some questions too,
if we have several different servers, so we have to block from where to where? is it enough to just apply DSS and then promote it from server 1 to other servers?
thank you.