IT28791: SECURITY APAR FOR CVE-2018-1902

IBM Spectrum Control 5.3.3 (May 2019)

APAR status

• Closed as program error.

Error description

• Client certificates can be spoofed in WebSphere Application
  Server
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Control 5.2.x and 5.3.x users                   *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See security bulletin for details of the vulnerabilities:    *
  * http://www.ibm.com/support/docview.wss?uid=ibm10881003       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fix maintenance                                        *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is contained in the following releases:
  
  IBM Spectrum Control 5.3.3 | 5.3.3-IBM-SC | May 2019
  
  IBM Spectrum Control 5.2.17.3 | 5.2.17-TIV-TPC-FP0003 | May 2019
  
  http://www.ibm.com/support/docview.wss?&uid=swg21320822
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TPC

• Fixed component ID

  5608TPC00

Applicable component levels