IT47547: DO NOT LOG QUERY PARAMETERS TO USER TRACE.

APAR status

• Closed as program error.

Error description

• In some cases query parameters can contain authentication
  information, they should therefore not be logged to User Trace.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM App Connect Enterprise v12 and v13
  
  
  Platforms affected:
  LinuxZ64, LinuxX64, WinX64, AIX, LinuxPPCLE64
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  In certain scenarios, query parameters in a web service request
  may include sensitive authentication information. To maintain
  security and confidentiality, such parameters should not be
  logged in User Trace
  

Problem conclusion

• The product no longer logs query parameters in UserTrace.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version   Maintenance Level
  v12.0      12.0.12.18
  v13.0      13.0.5.0
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  APP CONNECT ENT

• Fixed component ID

  5724J0570

Applicable component levels