IT44533: PCOMM V13.0.6 - PCSCM.EXE PROCESS DETAILS IS EXPOSED FROM ONE USER TO ANOTHER USING PROCESS EXPLORER

APAR status

• Closed as program error.

Error description

• When using a Process Explorer, one user is able to access other
  user's PCSCM process details, when running PCOMM on a multi-user
  Windows environment (such as Windows Server 2016, or Citrix
  environment).
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All IBM Personal Communications in multi-user environment    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * PCSCM process from one user is accessible by another user of *
  * the same machine using Process Explorer tool. The user can   *
  * see Properties, Handles, and Environment variables of        *
  * another user.                                                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Here are the steps to reproduce the problem.
  .
  1) Launch the PCOMM session in one user machine.
  2) In the other session, launch the Process Explorer by another
  user on the same machine.
  3) One user will be able to see the other user's PCOMM
  information using PCSCM.EXE property.
  

Problem conclusion

• PCSCM.EXE code changes have been made to restrict the access to
  other users in all possible environments.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• PCSCM
  

Fix information

• Fixed component name

  PCOMM COMBO-ENG

• Fixed component ID

  5639I7000

Applicable component levels