Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Michel Kraaij - van den Berg (Michel Kraaij)
Anamata
Pega Lead on Quality Awareness, Pega CSSA, Pega Trainer, Testconsultant
Anamata
NL
Michel Kraaij Member since 2016 43 posts
Anamata
Posted: Dec 13, 2021
Last activity: Dec 15, 2021
Posted: 13 Dec 2021 10:33 EST
Last activity: 15 Dec 2021 3:57 EST
Closed
Solved

Log4J vulnerability and Pega Personal editions

At this moment Pega is communicating about the Log4j vulnerability, advising on-premise services and cloud environments to make necessary changes. As stated "this vulnerability could allow malicious actors to take control of organizational networks using Log4j". In what way are Pega Personal Edition versions impacted? I can imagine that a lot of people are using this version of Pega AND are connected to (company) networks. Are they prone to vulnerabilities?

To see attachments, please log in.
Pega Platform
Security

  • Priyesh Agrawal

Accepted Solution

Posted: 3 years ago
Updated: 2 years ago
Posted: 14 Dec 2021 8:04 EST
Updated: 15 Dec 2021 3:57 EST
Eric Rietveld (Eric Rietveld) Principal System Architect
Pegasystems Inc.
NL

Hi @Michel Kraaij, yes, your personal edition is as vulnerable as regular Pega versions. Probably your network configuration is making it harder to reach it, however please follow the instructions in the published article or turn it off until hotfixes are released and you get a chance to install it, to help protect you and your company's network.

To see attachments, please log in.
Posted: 2 years ago
Updated: 2 years ago
Posted: 14 Dec 2021 9:29 EST
Updated: 14 Dec 2021 9:30 EST
Michel Kraaij - van den Berg (Michel Kraaij)
Anamata
Pega Lead on Quality Awareness, Pega CSSA, Pega Trainer, Testconsultant
Anamata
NL

I already suspected that, @Eric Rietveld. Maybe it's good to inform clients/customers that are working according to the BYOD policy. It's not very uncommon that professionals using these devices have personal editions installed.

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice