Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Vishal Bhardwaj (VishalB8)
Capgemini
Pega LSA
Capgemini
GB
VishalB8 Member since 2013 16 posts
Capgemini
Posted: Nov 16, 2016
Last activity: Nov 17, 2016
Posted: 16 Nov 2016 9:22 EST
Last activity: 17 Nov 2016 8:14 EST
Closed

Issue reported in Security Test

Dear Team,

We had a security test on our PEGA application and they reported below issues : -

  • Path-relative style sheet import

  • Frameable response (potential Clickjacking)

  • Cacheable HTTPS response

Can anybody help me what this is all about and if anything can be/needs to be done at Pega Level or WAS level.

Thanks,

Vishal

To see attachments, please log in.
Security

Posted: 8 years ago
Posted: 17 Nov 2016 4:30 EST
Santanu Bhattacherjee (Santanu) Senior Manager, Cloud Engineering, Management Plane Services
Pegasystems Inc.
IN

Hi

I recommend you to please raise a support request with Pega GCS and get this investigated by support engineers.

 

To see attachments, please log in.
Posted: 8 years ago
Posted: 17 Nov 2016 4:56 EST
Lochana Durgada Vijayakumar (Lochan_DV)
PEGA
Senior Manager, Knowledge Management
Pegasystems Inc.
IN

Hi Vishal,

We believe this has to be investigated further through an SR with Pega Support. Please let us know the SR number once you create it.

Regards,
Lochan  |  Community Moderator  |  Pegasystems Inc.

To see attachments, please log in.
Posted: 8 years ago
Updated: 8 years ago
Posted: 17 Nov 2016 6:16 EST
Updated: 17 Nov 2016 6:25 EST
Lochana Durgada Vijayakumar (Lochan_DV)
PEGA
Senior Manager, Knowledge Management
Pegasystems Inc.
IN

Hi Vishal,

Please select Product Defect and please mention that you have been recommended to raise an SR through a PSC post (since its a security question) and add the URL to this post.

Regards,
Lochan  |  Community Moderator  |  Pegasystems Inc.

To see attachments, please log in.
Posted: 8 years ago
Posted: 17 Nov 2016 8:14 EST
Lochana Durgada Vijayakumar (Lochan_DV)
PEGA
Senior Manager, Knowledge Management
Pegasystems Inc.
IN

Hi Vishal,

Happy to help! Please let us know the SR number here so that we can tag your post with the details.

Regards,
Lochan  |  Community Moderator  |  Pegasystems Inc.

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice