← All advisories

Critical severity9.8NVD Advisory· Published Apr 12, 2021· Updated Jun 17, 2026

CVE-2020-15390

CVE-2020-15390

Description

pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo.

Affected products

3

Pega/Platformllm-fuzzy3 versions
= 8.4.0.237+ 2 more
- (no CPE)range: = 8.4.0.237
- (no CPE)
- cpe:2.3:a:pega:pega_platform:8.4.0.237:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

jayaramyalla.medium.com/sensitive-information-disclosure-due-to-improper-access-control-cve-2020-15390-124573c15824nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.