IV72069: SECURITY APAR:CVE-2015-1915 ENCRYPTED SESSION (SSL) COOKIE ISSUE IN IBM ENDPOINT MANAGER FOR REMOTE CONTROL

9.0.1-TIV-IEMRC901-IF0006-Readme.txt
9.1.0-TIV-IEMRC910-IF0006-Readme.txt

APAR status

• Closed as program error.

Error description

• IBM Endpoint Manager for Remote Control could allow a remote
  attacker to obtain sensitive information, caused by the failure
  to set the secure flag for the session cookie in SSL mode.
  
  CVE ID:
  CVE-2015-1915
  

Local fix

• n/a
  

Problem summary

• Users affected
  Server
  
  More information:
  http://www-01.ibm.com/support/docview.wss?uid=swg21882571
  

Problem conclusion

• This fix is included in the following maintenance packages
  910-TIV-IEMRC910-IF0006
  
  901-TIV-IEMRC901-IF0006
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIV EP MGR REM

• Fixed component ID

  5725C43RC

Applicable component levels

• R910 PSY

     UP