JR59215: Logon Id is written to log file when user tries to register twice

APAR status

• Closed as program error.

Error description

• When an existing user registers with the same email, the logon
  Id is written to the log file:
  
  Below is the sample log line (with actual values replaced with
  ##) ->
  [1/31/18 14:07:00:721 GMT] 00000100 UserRegistrat E
  com.ibm.commerce.
  usermanagement.commands.UserRegistrationAddCmdImpl
  newfearRegisterEnable CMN0620E The logon ID
  "#######@###.com|10151"
  that was specified already exists.
  

Local fix

Problem summary

• USERS AFFECTED:
  WebSphere Commerce Version 7 Fix Pack 9.
  
  PROBLEM ABSTRACT:
  Logon Id is written to log file when user tries to register
  twice
  
  BUSINESS IMPACT:
  Shopper email is exposed during exceptions.
  
  RECOMMENDATION:
  

Problem conclusion

• Updated logic to mask logon ID if it contains '@' character so
  that email addresses are not displayed in the log file.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WC BUS EDITION

• Fixed component ID

  5724I3800

Applicable component levels

• R700 PSY

     UP