IBM Support

JR60118: INFOSPHERE INFORMATION GOVERNANCE CATALOG - OPEN REDIRECT (CWE-601)

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Open Redirect in InfoSphere IGC can be potentially used by an
    attacker to redirect a user to a malicious site.
    

Local fix

Problem summary

  • *********************************************
    APAR Users Affected:
    *********************************************
    InfoSphere Information Governance Catalog users.
    
    *********************************************
    APAR Problem Description:
    *********************************************
    Open Redirect in InfoSphere IGC can be potentially used by an
    attacker to redirect a user to a malicious site
    
    Known attacks redirect a user to different part of the same
    application. It was not proven the vulnerability can be used in
    practice to redirect a user to a malicious site. Assuming this
    is possible, an attacker can launch a phishing scam and steal
    user credentials
    
    *********************************************
    APAR Recommendation:
    *********************************************
    Apply the fix for JR60118
    
    *****************************************
    

Problem conclusion

  • Apply the fix for JR60118
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR60118

  • Reported component name

    IS GOVCATLOG

  • Reported component ID

    5724Q36GC

  • Reported release

    B50

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-10-09

  • Closed date

    2018-11-14

  • Last modified date

    2018-11-14

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    IS GOVCATLOG

  • Fixed component ID

    5724Q36GC

Applicable component levels

  • RB50 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSZJPZ","label":"IBM InfoSphere Information Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
02 June 2020