IJ44155: APPSEC - IMPROPER ERROR HANDLING

APAR status

• Closed as program error.

Error description

• An attacker can gain sensitive information like
  vulnerable Framework, components, etc. used,
  if error message are not handled properly.
  

Local fix

Problem summary

• An attacker can gain sensitive information like
  vulnerable Framework, components, etc. used,
  if error message are not handled properly.
  

Problem conclusion

• This problem is fixed in 5.1.2 PTF 8
  To see all Spectrum Scale APARs and
  their respective fix solutions refer to page
  https://public.dhe.ibm.com/storage/spectrumscale/spectrum_scale_
  apars.html
  
  Benefits of the solution:
  Making mmvdisk more resilient to non-ascii
  chars in the configuration file.
  
  Work Around: None
  
  Problem trigger
  Nnon-ascii characters in the configuration file
  causes mmvdisk to throw an exception.
  
  Symptom:
  mmvdisk throw exception.
  
  Platforms affected: ALL Operating System environments
  
  Functional Area affected: ESS/GNR
  
  Customer Impact: Suggested
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SPEC SCALE STD

• Fixed component ID

  5737F33AP

Applicable component levels