Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Ponnurangam Nagaraj (PonnurangamN2827)
Vodafone

Vodafone
IN
PonnurangamN2827 Member since 2019 43 posts
Vodafone
Posted: Aug 2, 2019
Last activity: Oct 21, 2019
Posted: 2 Aug 2019 7:19 EDT
Last activity: 21 Oct 2019 5:43 EDT
Closed

NBA installation is causing security issue

Hi Team,

We had installed NBAA recently(on top PM 7.31 and Pega 7.3.1) and we observed mashup cookie is being added.

It was reported by security team while they were doing testing.

I was just going through the post https://community1.pega.com/community/product-support/question/what-cookies-are-placed-pega-web-mashup-and-what-are-those and found that cookie is introduced by PegaInternetApplicationComposer.js which is not secure.

PFB, for screenshot

Please suggest the mitigation of this issue.Thanks !!

***Moderator Edit-Vidyaranjan: Updated Platform Capability***

To see attachments, please log in.
Pega Customer Decision Hub
Decision Management

Posted: 5 years ago
Posted: 18 Oct 2019 17:12 EDT
Brad Tainter (Br@dTainter_GCS)
PEGA
Fellow, Technical Support, Platform Service
Pegasystems Inc.
US

Hi,

Can you please open up an SR to have this looked at with the security category?  This cookie is related to mashup and has nothing to do with decisioning.  Once you open up the SR, please respond with the SR# here.

Thanks!

 

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice