PH66862: PASSWORDS EXPOSED IN LAUNCHER LOGS, EVEN THOUGH THEY SHOULD HAVE BEEN MASKED BY RESOURCE REGISTRY ENCRYPTED VALUES

APAR status

• Closed as program error.

Error description

• When using the IBM Sterling Transformation Extender (ITX)
  Launcher with the LauncherLog feature activated
  (LauncherLog=ewsc in the dtx.ini file), a map failure report is
  printed in the log which can contain values  from the Resource
  Registry printed in plain text, despite them being encrypted
  values.
  

Local fix

• ITXCQ - ITX00062994
  PB / PB
  Circumvention: Disable LauncherLog
  

Problem summary

• Users Affected:
  IBM Transformation Extender users who use the launcher using
  Resource Registry encrypted values and a password in card
  command line.
  
  Problem Description:
  Passwords are exposed in Launcher logs, even though they should
  have been masked by Resource Registry encrypted values.
  
  Platforms Affected:
  All
  

Problem conclusion

• Correct issue with exposed passwords in launcher log, that
  should have been masked by Resource Registry encrypted values.
  Now the passwords are properly masked.
  
  Applies to:
  10.1.1.1, 10.1.2.1, 11.0.0.0, 11.0.1.1
  
  Fixed in the next service packs and releases.
  
  To obtain the fix for this APAR:
  
  To see if the next fix pack or product release is available,
  check the IBM Transformation Extender product Release Notes
  page:
  https://www.ibm.com/support/pages/node/318755
  
  If a fix pack release is available, download it from Fix
  Central:
  http://www.ibm.com/support/fixcentral/
  
  If a new product release is available, download it from
  PassportAdvantage:
  https://www.ibm.com/software/passportadvantage/pao_customer.html
  
  
  If the fix pack or product release is not available and you
  require the APAR fix immediately, request a Limited Availability
  Interim Fix (LAIF) by opening a support Case:
  https://www.ibm.com/mysupport
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ITX

• Fixed component ID

  5724Q2300

Applicable component levels