IV03430: HTTP: KDH RESPONDING TO NONEXISTENT WEB PAGE

IBM Tivoli Monitoring 6.2.2 Fix Pack 8 (6.2.2-TIV-ITM-FP0008)
IBM Tivoli Monitoring 6.2.2 Fix Pack 9 (6.2.2-TIV-ITM-FP0009)
IBM Tivoli Monitoring 6.2.2 Fix Pack 6 (6.2.2-TIV-ITM-FP0006)

APAR status

• Closed as program error.

Error description

• PROBLEM DESCRIPTION:
  
  the ITM web server responds to nonexistent web page requests
  with the default return page.  This can be viewed as a security
  exposure.
  
  
  RECREATE INSTRUCTIONS:
  This can be demonstrated by attempting to attach to sites such
  as
  http://servername:PORT/kdh/bigBanana
  http://servername:PORT/kdh/hotDogs
  

Local fix

• N/A
  

Problem summary

• HTTP: KDH responding to nonexistent web page.
  
  The IBM Tivoli Monitoring Tivoli Enterprise Basic Services
  (TEBS) web server responds to nonexistent web page requests with
  the default return page.  This can be viewed as a security
  exposure.
  

Problem conclusion

• Code changed to recognize nonexistent web pages and return the
  standard HTTP 404 NOT FOUND status code.
  
  The fix for this APAR is contained in the following maintenance
  packages:
  
    | fix pack | 6.2.2-TIV-ITM-FP0006
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  OA37732 OA38973

Fix information

• Fixed component name

  TEMS

• Fixed component ID

  5724C04MS

Applicable component levels

• R622 PSY

     UP

• R621 PSN

     UP