IBM Support

JR48815: XML PACK VULNERABILITIES THAT COULD LEAD TO PHISHING ATTACKS

Fixes are available

Download ISF roll-up 1 for InfoSphere Information Server Version 9.1.2
InfoSphere Information Server, Version 11.3 for Microsoft Windows
InfoSphere Information Server, Version 11.3 for AIX
InfoSphere Information Server, Version 11.3 for Linux
Download ISF roll-up 2 for InfoSphere Information Server Version 8.5.0.3
Download ISF roll-up 2 for InfoSphere Information Server Version 9.1.2
IBM InfoSphere Information Server Enterprise Edition V11.3 for Windows
Download ISF roll-up 3 for InfoSphere Information Server Version 9.1.2
Download ISF roll-up 4 for InfoSphere Information Server Version 9.1.2
Download ISF roll-up 5 for InfoSphere Information Server Version 9.1.2
Download ISF roll-up 7 for InfoSphere Information Server Version 9.1.2
Download ISF roll-up 8 for InfoSphere Information Server Version 9.1.2
Download ISF roll-up 4 for InfoSphere Information Server Version 8.5.0.3
Download ISF roll-up 11 for InfoSphere Information Server Version 9.1.2
Download ISF roll-up 12 for InfoSphere Information Server Version 9.1.2
Download ISF roll-up 1 for InfoSphere Information Server Version 8.7.0.2
Download ISF roll-up 10 for InfoSphere Information Server Version 9.1.2

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • XML Pack vulnerabilities exist that can lead to phishing
attacks.

Local fix

  • N/A

Problem summary

  • ****************************************************************
PROBLEM DESCRIPTION:
XML Pack vulnerabilities that could lead to phishing attacks
CVE-2013-4057
****************************************************************
RECOMMENDATION:
Refer to the following Security Bulletin for remediation:
http://www-01.ibm.com/support/docview.wss?uid=swg21666684

Problem conclusion

  • The recommended solution is to apply the fix as soon as
practical.

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    JR48815
    • 

  • Reported component name
    WIS DATASTAGE
    • 

  • Reported component ID
    5724Q36DS
    • 

  • Reported release
    912
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt
    • 

  • Submitted date
    2013-12-15
    • 

  • Closed date
    2014-03-31
    • 

  • Last modified date
    2014-03-31
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    WIS DATASTAGE
    • 

  • Fixed component ID
    5724Q36DS
    • 



Applicable component levels


    

  • R850  PSY
       UP
    • 

  • R870  PSY
       UP
    • 

  • R912  PSY
       UP
    • 

  • R801  PSN
       UP
    • 

  • R802  PSN
       UP
    • 

  • R810  PSN
       UP
    • 

  • R910  PSN
       UP
    • 








      
          
                    

          

          [{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSVSEF","label":"InfoSphere DataStage"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"912","Edition":"","Line of Business":{"code":"","label":""}}]
          

                    

        
        

        

      


      


        

            

            
Document Information


            

            


                        

            Modified date:
            

            31 March 2014
            

            
            
          

        


        

        


      


    


  





    

  



  
    
      

      
Page Feedback