IBM Support

IT02041: HTML FORMS LOGIN MIGRATION COOKIE IS NOT ENCRYPTED

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • HTML Forms Login Policy can be configured to create a migration
    cookie, which is used in clustered environments.  Session
    created on one node can be recreated on another node based on
    the identity and credential information contained in the
    migration cookie.  The data might not be encrypted.
    

Local fix

Problem summary

  • Enhanced security processing HTML form migration cookie.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    IT02041

  • Reported component name

    DATAPOWER

  • Reported component ID

    DP1234567

  • Reported release

    401

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2014-05-28

  • Closed date

    2014-07-28

  • Last modified date

    2014-08-05

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    DATAPOWER

  • Fixed component ID

    DP1234567

Applicable component levels

  • R500 PSY

       UP

  • R600 PSY

       UP

  • R601 PSY

       UP



Document information

More support for: IBM DataPower Gateways
General

Software version: 4.0.1

Reference #: IT02041

Modified date: 05 August 2014