PM10621: SENSITIVE INFORMATION IN DEFAULT_CREATE.LOG FILE IF USING WEBSPHERE APPPLCATION SERVER (NON-SAF) MANAGED SECURITY

APAR status

• Closed as program error.

Error description

• When using the zPMT to create a profile using "WebSphere
  Application Server" managed security (as opposed to no security,
   or a z/OS security product), sensitive information might be in
  the default_create.log file that is produced on the target z/OS
  system when the BBOWWPFx job is run to create the profile.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  Users of WebSphere Application Server       *
  *                  for z/OS not using a z/OS security product  *
  ****************************************************************
  * PROBLEM DESCRIPTION: When using the WebSphere ISPF           *
  *                      Customization Dialog to create a        *
  *                      profile using "WebSphere Application    *
  *                      Server managed security" (as opposed    *
  *                      to no security, or a z/OS security      *
  *                      product), sensitive information might   *
  *                      be in the default_create.log file       *
  *                      that is produced on the target z/OS     *
  *                      system when the BBOWWPFx job is run     *
  *                      to create the profile.                  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  One of the panels within the WebSphere ISPF Customization
  Dialog is a panel on which a security type for the WebSphere
  Application Server profile is chosen.
  
  On this panel when using option "WebSphere Application Server
  security", sensitive information might be saved.
  
  After generating the customization jobs, uploading them, and
  running the BBOWWPFx job to create the profile, the
  information might be in the default_create.log log file that
  resides within the WAS_HOME directory containing the newly
  created profile.
  

Problem conclusion

• APAR PM10621 is currently targeted for inclusion in
  Service Level (Fix Pack) 6.1.0.33 of WebSphere
  Application Server V6.1
  
  Please refer to URL:
  //www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
  for Fix Pack availability.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PM10454

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE FOR Z

• Fixed component ID

  5655I3500

Applicable component levels

• R610 PSY

     UP