IBM Support

JR52983: WebSphere Commerce utilities that use ANT print out passwords in debug mode

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • This ifix supersedes JR52117 on fix pack 7.0.0.8 and 7.0.0.9
    When WebSphere Commerce utilities that use Apache Ant run in
    debug mode, passwords are shown in the debug log files
    

Local fix

  • Do not run WebSphere Commerce utilities that use Apache Ant in
    debug mode.
    

Problem summary

  • USERS AFFECTED:
    All WebSphere Commerce V6.0 and V7.0 customers
    
    PROBLEM ABSTRACT:
    WebSphere Commerce utilities that use ANT print out passwords in
     debug mode
    
    BUSINESS IMPACT:
    Log files include sensitive data
    
    RECOMMENDATION:
    

Problem conclusion

  • Implemented an Ant logger that prevents passwords from being
    logged.
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR52983

  • Reported component name

    WC BUS EDITION

  • Reported component ID

    5724I3800

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2015-03-30

  • Closed date

    2015-06-11

  • Last modified date

    2015-06-11

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WC BUS EDITION

  • Fixed component ID

    5724I3800

Applicable component levels

  • R700 PSY

       UP



Document information

More support for: WebSphere Commerce Enterprise

Software version: 7.0

Reference #: JR52983

Modified date: 11 June 2015