01642 06 11 11 Arrange Call

Improper Access Control Vulnerability in pyActivity via GetWebInfo in Pega Platform 8.4.0.237

CVE-2020-15390 · CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2020-15390

pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo.

Learn more about our Web App Pen Testing.