Resolving The Problem

Source

RETAIN tip: H214120

Symptom

When operating the listed switch products with legacy versions of Microsoft Internet Explorer (IE) Web client or Google Chrome Web client, these older versions might allow MIME-sniffing on the response body of the X-Content. This can result in displaying the incorrect content type instead of the declared or intended content type.

This is a minor security concern and does not affect the functional operation of the switch. This concern does not exist if the Mozilla Firefox Web client is used, regardless of the level.

Affected configurations

The system is configured with one or more of the following IBM option part numbers:

• Flex System IB6131 InfiniBand Switch, option part number 90Y3450, replacement part number 90Y3453
• IBM Flex System EN6131 40 Gb Ethernet Switch, option part number 90Y9346

This tip is not system specific.

This tip is not software specific.

Workaround

Choose one of these options:

1. Use a current level of Microsoft Internet Explorer (IE) Web client or Google Chrome Web client.
2. Use the Mozilla Firefox Web client, any level.

Additional information

To avoid X-Content body type being incorrectly displayed, for the listed switch products, for the content type, with a Web client, use the current level of Microsoft IE Web client or Google Chrome Web client.

Users can also completely avoid this concern by using the Mozilla Firefox Web client. All levels of the Mozilla Firefox Web client are free of this issue.