APAR status
Closed as program error.
Error description
An improper access control vulnerability in IBM InfoSphere Information Server allows low level users to view information of higher privilege level users
Local fix
Problem summary
**************************************************************** USERS AFFECTED: Users of Information Server 11.7 **************************************************************** PROBLEM DESCRIPTION: A vulnerability in IBM InfoSphere Information Server allowed lower level authenticated user to view other users and groups list. **************************************************************** RECOMMENDATION: Refer to the following Security bulletin for actions to perform: https://www.ibm.com/support/pages/node/6612325 ****************************************************************
Problem conclusion
fix coded
Temporary fix
Comments
APAR Information
APAR number
JR65074
Reported component name
INFO SRVR PLATF
Reported component ID
5724Q3612
Reported release
B71
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2022-08-04
Closed date
2022-10-06
Last modified date
2022-10-06
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
INFO SRVR PLATF
Fixed component ID
5724Q3612
Applicable component levels
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSZJPZ","label":"InfoSphere Information Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"11.7","Line of Business":{"code":"LOB10","label":"Data and AI"}}]
Document Information
Modified date:
07 October 2022