Question
CBA
IN
Last activity: 11 Jan 2023 4:46 EST
Pega Security vulnerability issues in Pega 7.3.1 (IDOR and CSRF attack)
Hi Team,
Could you please suggest security vulnerability breaches in pega 7.3.1 version for IDOR( Insecure direct object reference and CSRF attack fixes.
Pegasystems Inc.
GB
@Mohan_Billava please take a look at the announcements that are made on the Security Bulletins page.
You can also search through the Pega Security Advisory support documents which may or may not include references to existing hotfixes for your version.
If you experience any reproducible issues you can log these as support incidents on the My Support Portal in order that the team can check if you are missing any known hotfixes.
Pega 7.3.1 is now in extended support. See the full schedule here.
You can check the Resolved Issues pages for any XSS concerns you might have.
CBA
IN
@MarijeSchillern Thanks for the Details. will have a look
CBA
IN
@MarijeSchillern We are still facing this issue. Given link dont have much info on pega 731 security vulnerability.
Pegasystems Inc.
GB
@Mohan_Billava if you are experiencing a security concern in your environment, please could you log a support incident on the msp?
Accepted Solution
Updated: 11 Jan 2023 4:46 EST
CBA
IN
issue got resolved by adding couple of DSS related to CSRF attack and creating privileg rule for admin sections.