PM12359: URLs produce stack trace which could show to an attacker the structure of code making the application vunerable

APAR status

• Closed as program error.

Error description

• Rational Asset manager V7.1.1.1 URLs produce stack trace which
  could show to an attacker the structure of code making the
  application vunerable
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Two check boxes have been added to the advanced
  configuration page that allow a user to control the amount
  of information displayed on the error page.
  
  See:
  http://?server?/ram/admin/repository/advancedConfiguration.f
  aces
  Checkboxes:
  Display stack trace information on the Rational Asset
  Manager error page.
  Display detailed error messages on the Rational Asset
  Manager error page.
  

Problem conclusion

• Fixed in Rational Asset Manager V7.5
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL ASSET MGR

• Fixed component ID

  5724R4200

Applicable component levels

• R710 PSN

     UP