IT13724: TIVOLI STORAGE MANAGER PASSWORD IS DISPLAYED IN APPLICATION TRACE OUTPUT.

IBM Spectrum Protect client 7.1.6.x interim fix downloads

APAR status

• Closed as program error.

Error description

• When application tracing is enabled, the Tivoli Storage Manager
  password may be displayed in plain text in the application trace
  output.  The passwords displayed are passwords that the logged
  in user executing the operation would already know or have
  access to via their login credentials.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Tivoli Storage Manager Backup Archive client                 *
  * Tivoli Storage Manager for Virtual Environments component    *
  * Data Protection for Microsoft Hyper-V                        *
  * Tivoli Storage Manager for Virtual Environments component    *
  * Data Protection for VMware                                   *
  * versions 6.3, 6.4 and 7.1 on Windows platform.               *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION.                                       *
  * For additional details, refer to the following two security  *
  * bulletins published here:                                    *
  * http://www.ibm.com/support/docview.wss?uid=swg21985114       *
  * http://www.ibm.com/support/docview.wss?uid=swg21993558       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available.  This issue is projected  *
  * to be fixed in the Tivoli Storage Manager Client levels      *
  * 7.1.6.3, 6.4.3.4 and 6.3.2.6.                                *
  *                                                              *
  * Note 1: The Tivoli Storage Manager (TSM) Client is a part of *
  * the Data Protection for Microsoft Hyper-V and VMware. In     *
  * Data Protection for Microsoft Hyper-V, VMware environments,  *
  * the TSM Client is also known as the data mover.              *
  * Note 2: This is subject to change at the discretion of IBM.  *
  ****************************************************************
  

Problem conclusion

• Internal routine that puts pwd into trace file has been updated.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• DSMC     DSM
  

Fix information

• Fixed component name

  TSM CLIENT

• Fixed component ID

  5698ISMCL

Applicable component levels

• R71W PSY

     UP

• R64W PSY

     UP

• R63W PSY

     UP