IBM Support

PH64018: SET PERMISSIONS-POLICY HEADER FOR THE ADMIN CONSOLE

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • The admin console should have the Permissions Policy set for the
    admin console as a security hardening measure
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server                                      *
    *                  Administrative Console                      *
    ****************************************************************
    * PROBLEM DESCRIPTION: Setting the Permissions-Policy header   *
    *                      for                                     *
    *                      security hardening                      *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    Setting the Permissions-Policy header for security hardening
    

Problem conclusion

  • The Permissions-Policy header is being set as a security hardeni
    measure for the console.
    
    The fix for this APAR is targeted for inclusion in fix pack
    8.5.5.29 and 9.0.5.25. For more information, see 'Recommended
    Updates for WebSphere Application Server':
    https://www.ibm.com/support/pages/node/715553
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH64018

  • Reported component name

    WEBSPHERE FOR Z

  • Reported component ID

    5655I3500

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2024-11-06

  • Closed date

    2025-05-22

  • Last modified date

    2025-05-22

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBSPHERE FOR Z

  • Fixed component ID

    5655I3500

Applicable component levels

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"850","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Document Information

Modified date:
22 May 2025