IBM Support

JR48095: SOMETIMES SENSITIVE INFORMATION IS RECORDED WHEN AN INSTALL FAILS

Fixes are available

InfoSphere Information Server, Version 11.3 for Microsoft Windows
InfoSphere Information Server, Version 11.3 for AIX
InfoSphere Information Server, Version 11.3 for Linux
IBM InfoSphere Information Server Enterprise Edition V11.3 for Windows

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • In certain situations after a specific error has been
encountered and InfoSphere Information Server installation
fails, sensitive data is recorded in a file. For releases 8.5
and earlier this vulnerability can occur only when updating an
existing installation with maintenance. For releases 8.7 and
onwards, this vulnerability can occur when performing all types
of installations including new installations, adding of
components not previously installed and updating an existing
installation with maintenance. If the installation does not fail
 no sensitive information will be recorded and there is no
vulnerability.

Local fix

  • 



Problem summary


    

  • In certain situations after a specific error has been
encountered and InfoSphere Information Server installation
fails, sensitive data is recorded in a file. For releases 8.5
and earlier this vulnerability can occur only when updating an
existing installation with maintenance. For releases 8.7 and
onwards, this vulnerability can occur when performing all types
of installations including new installations, adding of
components not previously installed and updating an existing
installation with maintenance. If the installation does not fail
 no sensitive information will be recorded and there is no
vulnerability.

    



Problem conclusion


    

  • Error handling was incorrect.

    



Temporary fix


    

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    JR48095
    • 

  • Reported component name
    INFO SRVR PLATF
    • 

  • Reported component ID
    5724Q3612
    • 

  • Reported release
    910
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt
    • 

  • Submitted date
    2013-10-16
    • 

  • Closed date
    2013-12-19
    • 

  • Last modified date
    2013-12-19
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    INFO SRVR PLATF
    • 

  • Fixed component ID
    5724Q3612
    • 



Applicable component levels


    

  • R850  PSY
       UP
    • 

  • R870  PSY
       UP
    • 

  • R910  PSY
       UP
    • 

  • R912  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSZJPZ","label":"InfoSphere Information Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"9.1","Line of Business":{"code":"LOB10","label":"Data and AI"}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            12 October 2021
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback