IC87210: TSM 6.3 AND 6.4 CLIENT HAS UNAUTHORIZED ACCESS VULNERABILITY

APAR status

• Closed as program error.

Error description

• TSM 6.3 and 6.4 Web GUI has unauthorized access vulnerability
  CVSS base score: 5.1
  See Security Bulletin at this link:
  http://www.ibm.com/support/docview.wss?&uid=swg21624118
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Version 6.3 and 6.4 backup-archive clients   *
  *                 running on all supported platforms           *
  ****************************************************************
  * PROBLEM DESCRIPTION: See Security Bulletin at this link:     *
  *       http://www.ibm.com/support/docview.wss?uid=swg21624118 *
  ****************************************************************
  * RECOMMENDATION: Follow the recommendations in the Security   *
  *                 Bulletin. This issue is fixed in:            *
  *                 6.4.0.1 and 6.3.1                            *
  ****************************************************************
  

Problem conclusion

• The problem has been fixed so that it no longer occurs.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• CLIENT
  

Fix information

• Fixed component name

  TSM CLIENT

• Fixed component ID

  5698ISMCL

Applicable component levels

• R63W PSY

     UP

• R63A PSY

     UP

• R63H PSY

     UP

• R63L PSY

     UP

• R63M PSY

     UP

• R63S PSY

     UP

• R63W PSY

     UP

• R64A PSY

     UP

• R64W PSY

     UP

• R64H PSY

     UP

• R64S PSY

     UP

• R64L PSY

     UP

• R64M PSY

     UP