PI64299: Installshield generates installation executables which are vulnerable DLL-planting vulnerability for .Net client

APAR status

• Closed as program error.

Error description

• InstallShield generates installation executables which are
  vulnerable to an DLL-planting vulnerability during installation
  of the .NET client
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All WebSphere eXtreme Scale 8.6.0           *
  *                  customers                                   *
  *                  attempting to install the .NET client.      *
  ****************************************************************
  * PROBLEM DESCRIPTION: InstallShield generates installation    *
  *                      executables which are                   *
  *                      vulnerable to an DLL-planting           *
  *                      vulnerability during installation       *
  *                      of the .NET client                      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  CVEID: CVE-2016-2542
  DESCRIPTION: Flexera InstallShield could allow a local
  attacker to gain elevated privileges on the system, caused by
  an untrusted search path. An attacker could exploit this
  vulnerability using a Trojan horse DLL in the current working
  directory of a setup-launcher executable file to gain elevated
  privileges on the system.
  CVSS Base Score: 7.8
  CVSS Temporal Score: See
  https://exchange.xforce.ibmcloud.com/vulnerabilities/110914
  for the current score
  CVSS Environmental Score*: Undefined
  CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
  

Problem conclusion

• See recommended fixes page for Websphere eXtreme Scale at:
  http://www-01.ibm.com/support/docview.wss?uid=swg27018991
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WS EXTREME SCAL

• Fixed component ID

  5724X6702

Applicable component levels

• R860 PSY

     UP