PI54694: BASIC APPLICATION AUTHENTICITY SECURITY CHECK FAILES WHEN TRYING TO SEND CHALLENGE WHEN PARAMETERS ARE NULL.

IBM MobileFirst Platform Foundation Interim Fix README for 6.3

APAR status

• Closed as program error.

Error description

• Basic application authenticity security check failes when trying
  to send challenge when parameters are null.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users with mfp server 6.3.0 version.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * If application authenticity security is disabled (using the  *
  * Console to do so), and parameters for authenticity are       *
  * missing (meaning are not inserted or deleted from the        *
  * application descriptor), the security check will fail        *
  * although it is set as disabled.                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * -                                                            *
  ****************************************************************
  

Problem conclusion

• The code was modified so that an absence of the parameters won't
  affect the security check when it is disabled.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MFPF/WORKLIGHT

• Fixed component ID

  5725I4301

Applicable component levels

• R630 PSY

     UP