IBM Support

PH10504: SERVLET REQUEST REMOTE ADDRESS VALUE IS INCORRECT WITH WAS 8.5.5.15 PLUGINS FIX PACK LEVEL

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • At 8.5.5.15 WAS Plugin fix level, the remote address retrieved
    is NULL from the call to mod_was_ap22_http.cb_get_extended_info.
      We also see the $WSRA request header is getting removed.  This
     causes the request.getRemoteAddr() ServletRequest method to
    return the IBM i OS Server IP address instead of the remote
    client IP address, as it should.
    
    At 8.5.5.14 WAS Plugin fix level, the remote address retrieved
    is the correct value of the client IP address, which also
    matches the remote host value.
    
    This issue applies to the different plugin fix pack levels only
    (8.5.5.15 v. 8.5.5.14 Plugin).  For example, the 8.5.5.15 server
    and 8.5.5.14 plugin configuration will return the correct remote
    address since 8.5.5.14 Plugin is used.  Vice versa, the issue
    can be recreated when the Web Server Plugin is at 8.5.5.15 and
    the sever fix level is at 8.5.5.14 since 8.5.5.15 Plugin is
    used.
    

Local fix

  • Use the ServletRequest Remote Host value or connect directly to
    the WAS internal HTTP/HTTPS transport.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server V8.5 and V9.0.                       *
    ****************************************************************
    * PROBLEM DESCRIPTION: On IBM i,the "request.getRemoteAddr()"  *
    *                      Servlet API does not return the         *
    *                      remote client's IP address.             *
    ****************************************************************
    * RECOMMENDATION:  Apply fix pack 8.5.5.16 or fix pack         *
    *                  9.0.5.0.                                    *
    ****************************************************************
    On IBM i,the "request.getRemoteAddr()" Servlet API returns the
    IP address of the Application or Proxy server instead of the
    remote client's IP address.
    

Problem conclusion

Temporary fix

  • Roll back WebSphere Application Server to 8.5.5.14 or 9.0.0.10
    fix pack level.
    

Comments

APAR Information

  • APAR number

    PH10504

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2019-04-02

  • Closed date

    2019-06-19

  • Last modified date

    2019-06-19

  • APAR is sysrouted FROM one or more of the following:

    SE70910

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCVS22","label":"General"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"850","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
19 June 2019