APAR status
Closed as program error.
Error description
The X-Frame-Options or Content-Security-Policy headers are not available in the response for GET requests to https://apm-server:9443/secured or https://apm-server:9443/unsecured when the HTTP response code is 200. This request may be vulnerable to Clickjacking.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: * * xx * **************************************************************** * PROBLEM DESCRIPTION: * * xx * **************************************************************** * RECOMMENDATION: * ****************************************************************
Problem conclusion
xx
Temporary fix
Comments
APAR Information
APAR number
IJ31847
Reported component name
MONITORING UI V
Reported component ID
5725U05UI
Reported release
814
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2021-03-29
Closed date
2021-12-15
Last modified date
2021-12-15
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
MONITORING UI V
Fixed component ID
5725U05UI
Applicable component levels
[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTFXA","label":"IBM Monitoring"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"814"}]
Document Information
Modified date:
16 December 2021