JR60176: INFOSPHERE INFORMATION GOVERNANCE CATALOG - REFLECTED XSS (CROSS-SITE SCRIPTING) VULNERABILITY

APAR status

• Closed as program error.

Error description

• A Cross-Site Scripting (XSS) vulnerability in InfoSphere IGC can
  be used by an attacker to inject arbitrary client-side script
  

Local fix

• NA
  

Problem summary

• *********************************************
  APAR Users Affected:
  *********************************************
  Users of InfoSphere Information Governance Catalog that use the
  import functionality.
  
  *********************************************
  APAR Problem Description:
  *********************************************
  A non-persistent Cross-Site Scripting (XSS) vulnerability in
  InfoSphere IGC can be used by an attacker to execute malicious
  client-side script by manipulated victim.
  
  *********************************************
  APAR Recommendation:
  *********************************************
  Apply the fix for JR60176
  
  *********************************************
  

Problem conclusion

• Apply the fix for JR60176
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IS GOVCATLOG

• Fixed component ID

  5724Q36GC

Applicable component levels

• RB31 PSY

     UP

• RB50 PSY

     UP

• RB70 PSY

     UP