User credentials display in log file when exceptions occur
User credentials display in Pega RULES log when exceptions occur.
Steps to Reproduce
- Configure a link in a section to open new window
- Include the User account information in the new harness that opens up OnClick of link. An exception occurs and the username and password display in the logs
A defect in Pegasystems’ code or rules. Pega engine is prints the username and password without sanitizing when the engine attempts to create the primary page associated with the parameters received in URL.
0% found this useful