Question
Accenture
DE
Last activity: 24 Feb 2021 5:54 EST
Security Alert SECU0001 in Pega 8.3 on Pega cloud
Hi Guys,
In our application we are facing the SECU0001 security alert. We are using Pega 8.3.4 on pegacloud.
We are using the ootb feature Open Work By Handle:
During the call of this action the security alert SECU0001 message is populated right before the call of the standard doUIAction Pega-UIEngine:08-03-05 activity.
The message text is the following:
| Unexpected properties received in HTTP request : Rule-Obj-Activity: @baseclass.doUIAction @The following unexpected properties were received in an HTTP request for Thread ************: Declare_pyDisplay.pyDCDisplayState.pyActiveDocumentType |
Where Declare_pyDisplay is the page from Pega-EndUserUI:08-01-01. Therefor for me it looks like the standard Pega data page cause the problem during standard Pega activity call.
I've searched different topics and questions about this alert on pega collaboration forum but it doesn't look like it can help:
Hi Guys,
In our application we are facing the SECU0001 security alert. We are using Pega 8.3.4 on pegacloud.
We are using the ootb feature Open Work By Handle:
During the call of this action the security alert SECU0001 message is populated right before the call of the standard doUIAction Pega-UIEngine:08-03-05 activity.
The message text is the following:
| Unexpected properties received in HTTP request : Rule-Obj-Activity: @baseclass.doUIAction @The following unexpected properties were received in an HTTP request for Thread ************: Declare_pyDisplay.pyDCDisplayState.pyActiveDocumentType |
Where Declare_pyDisplay is the page from Pega-EndUserUI:08-01-01. Therefor for me it looks like the standard Pega data page cause the problem during standard Pega activity call.
I've searched different topics and questions about this alert on pega collaboration forum but it doesn't look like it can help:
- https://community.pega.com/knowledgebase/articles/secu0001-alert-unexpected-properties-received-http-request
- https://collaborate.pega.com/question/secu0001-alert-unexpected-properties-received-http-request
- https://community.pega.com/knowledgebase/products/platform/resolved-issues?tid=All&field_sr_value=&field_issue_value=&title=&body_value=&tid_1=All&q=SECU0001&page=0
Based on the information from this page (SA-31582): https://community.pega.com/support/support-articles/secu0001-alert-continuously-appears-alert-logs this is a Pega defect and should be fixed in pega 8.2. However the link to the issue itself doesn't work (at least for me): https://community.pega.com/ISSUE%20404321?f%5B0%5D=version%3A27976 .
Therefore I do have the following questions:
- Is it any concern regarding the logic from above? Am I missing anything?
- If not 1 I would like to know how should I address that issue? Is that any hotfix that I can install?
- We are planning to updated to version 8.5. Would that heal this issue automatically?
Best Regards, Dmitry
Pegasystems Inc.
US
Hi @dmitry.markov!
I spoke to my Support Engineers and they've asked that you open up a case within MySupport Portal and attach your logs and tracer.
Let us know the case id so that we may track for you.
Thanks!
Updated: 24 Feb 2021 3:21 EST
Accenture
DE
Hi @MarissaRogers,
I've create the INC-164450. However I did not upload files(tracer), because the size is limited up to 20 Mb, which is very optimistic in current world. Ftp did not work with my pega site login.
UPD: Pega provided a link to the ftp for huge files. Thank you very much for that! That is very helpful.
Best Regards,
Dmitry