# How to fix SECU0001 Alerts in PDC/Pega 8.4.2

**URL:** <https://forums.pega.com/t/how-to-fix-secu0001-alerts-in-pdc-pega-8-4-2/3939>\
**Category:** General\
**Tags:** java-and-activities, 8-4-2, system-administration, security\
**Created:** [February 9, 2023, 2:15pm UTC](https://forums.pega.com/t/how-to-fix-secu0001-alerts-in-pdc-pega-8-4-2/3939 "2023-02-09T14:15:06Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![KranthiAnnavarapu](https://yyz2.discourse-cdn.com/pega/user_avatar/forums.pega.com/kranthiannavarapu/32/4508_2.png) [@KranthiAnnavarapu](https://forums.pega.com/u/KranthiAnnavarapu)\
**Post date:** [February 9, 2023, 2:15pm UTC](https://forums.pega.com/t/how-to-fix-secu0001-alerts-in-pdc-pega-8-4-2/3939/1 "2023-02-09T14:15:06Z")

</div>

We are seeing a lot of SECU0001 alerts in production. This is happening for multiple applications. Most of them are showing OOTB activities in the Splunk Logs.

ReloadSection @baseclass

pzUpdateClipboardModels @baseclass

DOCLOSE @Work

Is there any way we can fix these alerts ? Is it okay to suppress these alerts ?

---

<div class="post-metadata">

**Author:** ![MarijeSchillern](https://yyz2.discourse-cdn.com/pega/user_avatar/forums.pega.com/marijeschillern/32/23321_2.png) [@MarijeSchillern](https://forums.pega.com/u/MarijeSchillern)\
**Post date:** [February 9, 2023, 3:25pm UTC](https://forums.pega.com/t/how-to-fix-secu0001-alerts-in-pdc-pega-8-4-2/3939/2 "2023-02-09T15:25:12Z")

</div>

@KranthiAnnavarapu similar question was answered [here](https://support.pega.com/question/unregistered-request-encountered-refreshing-launched-portal#comment-910956). Main documentation: [SECU0001 alert: Unexpected properties received in HTTP request](https://docs.pega.com/en-US/bundle/alerts/page/platform/alerts/secu0001-alert-unexpected-properties-received-http-request.html)

Currently, up to 8.4.3 release, the BAC functionality (the mechanism used by the SECU alerts), is actually a preview feature which is intended only to alert.

However, a defect in Pega code is causing OOTB components to falsely log SECU0019 alerts. It does cause inconvenience but it is very important to understand that those are not a vulnerability, just a false positive triggered by the bug.

This defect is addressed on 8.5 version (which is already available), and the current situation on 8.4 brings no security risks related to the scenario covered by SECU0019, and 8.4.4 suppresses the false entries by default.

You may wish to test your scenario in the latest 8.4 patch (or better yet, update to a version that is not in Extended support)

If you require further help we would need to understand the harness/section user was on when the alert is generated . It might be an idea to log a support incident for which you can first capture the fiddler trace to identify the section and check for hidden controls

Until the upgrade to 8.4.4 you can use the workaround listed here:

> **[URL tampering vulnerability detected warning message displays | Pega](https://community.pega.com/support/support-articles/url-tampering-vulnerability-detected-warning-message-displays)**
>
> Summary After upgrading to Pega Platform 8.4, on logging in to the Case Manager portal and creating a new work item, a warning message displays on the top of the harness.