pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15390
Reference (s):
- https://jayaramyalla.medium.com/sensitive-information-disclosure-due-to-improper-access-control-cve-2020-15390-124573c15824