PK75304: This fix addresses a serious security vulnerability

APAR status

• Closed as program error.

Error description

• Access problems with BasicAuthTAI
  

Local fix

Problem summary

• See also the technote "Security Fix Required: Access problems
  with BasicAuthTAI in WebSphere Portal" at
  http://www.ibm.com/support/docview.wss?rs=688&uid=swg21369956
  
  Customers on versions 6.0.1, 6.0.1.1 ,6.0.1.3, 6.0.1.4 and
  6.0.1.5 must apply the fix for APAR PK75304.
  Customers on version 6.1.0.0 (6.1) on non-z/OS platforms must
  also apply the fix for APAR PK75304.
  
  Versions not listed above are not affected by this issue, or
  already have the fix integrated.
  

Problem conclusion

• For security reasons there is no detailed description provided
  at this time.
  Please check the WebSphere Portal Security page at
  http://www.ibm.com/developerworks/websphere/zones/portal/securit
  y (copy the entire URL into your browser) for more information
  regarding this APAR.
  
  Failing Module(s):
     Configuration
  
  Affected Users:
     All users
  
  Version Information:
      Portal Version(s): 6.0.1.0
       Pre-Requisite(s):
        Co-Requisite(s): ---
  
      Portal Version(s): 6.0.1.1
       Pre-Requisite(s):
        Co-Requisite(s): ---
  
      Portal Version(s): 6.0.1.3
       Pre-Requisite(s):
        Co-Requisite(s): ---
  
      Portal Version(s): 6.0.1.4
       Pre-Requisite(s):
        Co-Requisite(s): ---
  
      Portal Version(s): 6.0.1.5
       Pre-Requisite(s):
        Co-Requisite(s): ---
  
      Portal Version(s): 6.1.0.0
       Pre-Requisite(s):
        Co-Requisite(s): ---
  
  Platform Specific:
     This fix applies to all platforms.
  
  A fix is available from Fix Central:
  
  http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorde
  r?apar=PK75304&productid=WebSphere%20Portal&brandid=5
  
  You may need to type or paste the complete address into your Web
  browser.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE PORTA

• Fixed component ID

  5724E7600

Applicable component levels

• R601 PSY

     UP

• R60E PSY

     UP

• R60G PSY

     UP

• R60H PSY

     UP

• R60J PSY

     UP

• R610 PSY

     UP