JR48095: SOMETIMES SENSITIVE INFORMATION IS RECORDED WHEN AN INSTALL FAILS

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • In certain situations after a specific error has been
    encountered and InfoSphere Information Server installation
    fails, sensitive data is recorded in a file. For releases 8.5
    and earlier this vulnerability can occur only when updating an
    existing installation with maintenance. For releases 8.7 and
    onwards, this vulnerability can occur when performing all types
    of installations including new installations, adding of
    components not previously installed and updating an existing
    installation with maintenance. If the installation does not fail
     no sensitive information will be recorded and there is no
    vulnerability.
    

Local fix

Problem summary

  • In certain situations after a specific error has been
    encountered and InfoSphere Information Server installation
    fails, sensitive data is recorded in a file. For releases 8.5
    and earlier this vulnerability can occur only when updating an
    existing installation with maintenance. For releases 8.7 and
    onwards, this vulnerability can occur when performing all types
    of installations including new installations, adding of
    components not previously installed and updating an existing
    installation with maintenance. If the installation does not fail
     no sensitive information will be recorded and there is no
    vulnerability.
    

Problem conclusion

  • Error handling was incorrect.
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR48095

  • Reported component name

    INFO SRVR PLATF

  • Reported component ID

    5724Q3612

  • Reported release

    910

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-10-16

  • Closed date

    2013-12-19

  • Last modified date

    2013-12-19

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    INFO SRVR PLATF

  • Fixed component ID

    5724Q3612

Applicable component levels

  • R850 PSY

       UP

  • R870 PSY

       UP

  • R910 PSY

       UP

  • R912 PSY

       UP



Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

InfoSphere Information Server

Software version:

9.1

Reference #:

JR48095

Modified date:

2013-12-19

Translate my page

Machine Translation

Content navigation