IBM Support

IT24705: PASSWORD TRANSFERRED WITHOUT ENCRYPTION IN XML

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • IBM Sterling B2B Integrator V5.2.6.3_2A
    
    When the security penetration test is run,
    the password is transferred in plain text
    without any encryption/encoding in XML on the login page.
    

Local fix

  • STRRTC - 544967
    BD / BD
    Circumvention: None
    

Problem summary

  • Users Affected:
    All
    
    Probelem Description:
    Password transferred without encryption in XML.
    
    Platforms Affected:
    All
    

Problem conclusion

  • Resolution Summary:
    
    A code fix is provided.
    
    Delivered In;
    5020603_6
    6000006
    6000304
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT24705

  • Reported component name

    STR FILE GATEWA

  • Reported component ID

    5725D0700

  • Reported release

    226

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-04-25

  • Closed date

    2018-07-10

  • Last modified date

    2021-02-23

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    STR FILE GATEWA

  • Fixed component ID

    5725D0700

Applicable component levels

[{"Line of Business":{"code":"LOB02","label":"AI Applications"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS4TGX","label":"IBM Sterling File Gateway"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"2.2"}]

Document Information

Modified date:
03 March 2021