PM10454: SENSITIVE INFORMATION IN DEFAULT_CREATE.LOG FILE IF USING WEBSPHERE APPLICATION SERVER (NON-SAF) MANAGED SECURITY

Fixes are available

IBM WebSphere Customization Tools V7.0 for Windows
IBM WebSphere Customization Tools V7.0 for Linux
7.0.0.11: WebSphere Application Server V7.0 Fix Pack 11 for IBM i
7.0.0.11: WebSphere Application Server V7.0 Fix Pack 11 for Windows
7.0.0.11: WebSphere Application Server V7.0 Fix Pack 11 for HP-UX
7.0.0.11: WebSphere Application Server V7.0 Fix Pack 11 for AIX
7.0.0.11: Java SDK 1.6 SR7 Cumulative Fix for WebSphere Application Server
7.0.0.11: WebSphere Application Server V7.0 Fix Pack 11 for Solaris
7.0.0.11: WebSphere Application Server V7.0 Fix Pack 11 for Linux
6.1.0.33: WebSphere Application Server V6.1 Fix Pack 33 for AIX
6.1.0.33: WebSphere Application Server V6.1 Fix Pack 33 for HP-UX
6.1.0.33: WebSphere Application Server V6.1 Fix Pack 33 for Solaris
6.1.0.33: WebSphere Application Server V6.1 Fix Pack 33 for Windows
6.1.0.33: Java SDK 1.5 SR12 FP1 Cumulative Fix for WebSphere
7.0.0.13: WebSphere Application Server V7.0 Fix Pack 13 for AIX
7.0.0.13: WebSphere Application Server V7.0 Fix Pack 13 for HP-UX
7.0.0.13: WebSphere Application Server V7.0 Fix Pack 13 for IBM i
7.0.0.13: WebSphere Application Server V7.0 Fix Pack 13 for Linux
7.0.0.13: WebSphere Application Server V7.0 Fix Pack 13 for Solaris
7.0.0.13: WebSphere Application Server V7.0 Fix Pack 13 for Windows
7.0.0.13: Java SDK 1.6 SR8FP1 Cumulative Fix for WebSphere Application Server
6.1.0.35: WebSphere Application Server V6.1 Fix Pack 35 for AIX
6.1.0.35: WebSphere Application Server V6.1 Fix Pack 35 for HP-UX
6.1.0.35: WebSphere Application Server V6.1 Fix Pack 35 for Solaris
6.1.0.35: WebSphere Application Server V6.1 Fix Pack 35 for Windows
6.1.0.35: Java SDK 1.5 SR12 FP2 Cumulative Fix for WebSphere
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for AIX
7.0.0.15: Java SDK 1.6 SR9 Cumulative Fix for WebSphere Application Server
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for HP-UX
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for IBM i
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for Linux
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for Solaris
7.0.0.15: WebSphere Application Server V7.0 Fix Pack 15 for Windows
6.1.0.37: Java SDK 1.5 SR12 FP3 Cumulative Fix for WebSphere
7.0.0.17: WebSphere Application Server V7.0 Fix Pack 17
7.0.0.17: Java SDK 1.6 SR9 FP1 Cumulative Fix for WebSphere Application Server
7.0.0.19: WebSphere Application Server V7.0 Fix Pack 19
7.0.0.21: WebSphere Application Server V7.0 Fix Pack 21
7.0.0.23: WebSphere Application Server V7.0 Fix Pack 23
7.0.0.25: WebSphere Application Server V7.0 Fix Pack 25
7.0.0.27: WebSphere Application Server V7.0 Fix Pack 27
7.0.0.29: WebSphere Application Server V7.0 Fix Pack 29
6.1.0.47: WebSphere Application Server V6.1 Fix Pack 47
7.0.0.31: WebSphere Application Server V7.0 Fix Pack 31
7.0.0.27: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
6.1.0.33: WebSphere Application Server V6.1 Fix Pack 33 for Linux
6.1.0.35: WebSphere Application Server V6.1 Fix Pack 35 for Linux
6.1.0.37: WebSphere Application Server V6.1 Fix Pack 37
6.1.0.39: WebSphere Application Server V6.1 Fix Pack 39
6.1.0.39: Java SDK 1.5 SR12 FP4 Cumulative Fix for WebSphere Application Server
6.1.0.41: WebSphere Application Server V6.1 Fix Pack 41
6.1.0.41: Java SDK 1.5 SR12 FP5 Cumulative Fix for WebSphere Application Server
6.1.0.43: WebSphere Application Server V6.1 Fix Pack 43
6.1.0.43: Java SDK 1.5 SR13 Cumulative Fix for WebSphere Application Server
6.1.0.45: WebSphere Application Server V6.1 Fix Pack 45
6.1.0.45: Java SDK 1.5 SR14 Cumulative Fix for WebSphere Application Server
6.1.0.47: Java SDK 1.5 SR16 Cumulative Fix for WebSphere Application Server

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When using the zPMT to create a profile using "WebSphere
    Application Server" managed security (as opposed to
    no security, or a z/OS security product", sensitive
    information might be in the default_create.log file that is
    produced on the target z/OS system when the BBOWWPFx job is
    run to create the profile.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  Users of WebSphere Application Server for   *
    *                  z/OS not using a z/OS security product      *
    ****************************************************************
    * PROBLEM DESCRIPTION: When using the zPMT to create a         *
    *                      profile using "WebSphere Application    *
    *                      Server" managed security (as opposed    *
    *                      to no security, or a z/OS security      *
    *                      product", sensitive information         *
    *                      might be in the                         *
    *                      default_create.log file that is         *
    *                      produced on the target z/OS system      *
    *                      when the BBOWWPFx job is run to         *
    *                      create the profile.                     *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    One of the panels within the zPMT is a panel on which a
    security type for the WebSphere Application Server profile is
    chosen.
    
    On this panel when using option "WebSphere Application Server
    security", sensitive information might be saved.
    
    After generating the customization jobs, uploading them, and
    running the BBOWWPFx job to create the profile, the
    information might be in the default_create.log log file that
    resides within the WAS_HOME directory containing the newly
    created profile.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PM10454

  • Reported component name

    WEBSPHERE CUST

  • Reported component ID

    5655N0213

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2010-03-22

  • Closed date

    2010-04-13

  • Last modified date

    2012-08-08

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    PM10621 PM10625

Fix information

  • Fixed component name

    WEBSPHERE CUST

  • Fixed component ID

    5655N0213

Applicable component levels

  • R700 PSY

       UP



Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

WebSphere Application Server for z/OS

Software version:

7.0

Reference #:

PM10454

Modified date:

2012-08-08

Translate my page

Machine Translation

Content navigation