IC99482: ENCRYPTED PASSWORD SHOWS UP IN CLEAR TEXT WHEN VIEWED IN QUEUEWATCHER > VIEW PROPERTIES > SI.CONFIG

5.2.6.0

APAR status

• Closed as program error.

Error description

• Encrypted password shows up in clear text when viewed in
  queueWatcher > View Properties > si.config
  
  SI Build Number: 5020400
  HotfixVersion: 5020400_BR75361_122_000_HF1
  OS-System: OS-System: SunOS 5.10,sparcv9
  Oracle 11.1.0.7.0
  
  Encrypted password shows up in clear text when viewed in
  queueWatcher > View Properties > si.config
  
  Database password is encrypted in the following property files:
  
  sandbox.cfg
  apservsetup
  jdbc.properties/.in
  
  (password not specified in customer_overrides.properties)
  
  Database password is encrypted when viewed in queueWatcher
  
  Customer has different groups - one responsible for
  the SI GUI (with admin and/or superuser rights) and one group
  responsible for the database.  The admins should not know
  the database password.
  

Local fix

• STRRTC - 398143
  PC / PC
  Circumvention: None
  

Problem summary

• Encrypted password shows up in clear text when viewed in
  queueWatcher > View Properties > si.config
  
  Users Affected:
  All
  
  Platforms Affected:
  All
  

Problem conclusion

• Fix to show the encrypted password.
  
  For more information, see the security bulletin:
  http://www.ibm.com/support/docview.wss?uid=swg21970927
  
  
  Delivered In:
  5020600
  5104_9
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR B2B INTEGRA

• Fixed component ID

  5725D0600

Applicable component levels

• R526 PSY

     UP