PI37468: MANUAL TASK SECURE PROPERTY VALUE IS NOT OBFUSCATED

IBM UrbanCode Deploy Fix Pack 4 (6.1.1.4) for 6.1.1
IBM UrbanCode Deploy Fix Pack 5 (6.1.1.5) for 6.1.1
IBM UrbanCode Deploy Fix Pack 6 (6.1.1.6) for 6.1.1
IBM UrbanCode Deploy Fix Pack 7 (6.1.1.7) for 6.1.1
IBM UrbanCode Deploy Fix Pack 8 (6.1.1.8) for 6.1.1
IBM UrbanCode Deploy iFix 1 for 6.1.1.7
IBM UrbanCode Deploy iFix 2 for 6.1.1.8

APAR status

• Closed as program error.

Error description

• When you define a secure property in a manual task, and then
  later in the workflow use a step which resolves that property,
  the secure property value will be printed in plain text.
  
  To reproduce:
  
  1) Create a process with a manual task, and define a secure
  property in that manual task
  2) Add a step to the process that resolves the manual task
  secure property value
  3) Run the process, respond to the manual task, and provide a
  value for the secure property
  4) View the log for the step created in 2). The secure property
  value will be displayed.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All                                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * When you define a secure property in a manual task, and then *
  * later in the workflow use a step which resolves that         *
  * property,                                                    *
  * the secure property value will be printed in plain text.     *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to UCD version 6.1.1.4                               *
  ****************************************************************
  

Problem conclusion

• Fixed in UCD version 6.1.1.4
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  UC DEPLOY

• Fixed component ID

  5725M5400

Applicable component levels

• R600 PSN

     UP

• R600 PSY

     UP

• R601 PSN

     UP

• R601 PSY

     UP

• R610 PSN

     UP

• R610 PSY

     UP

• R611 PSN

     UP

• R611 PSY

     UP