IBM Support

JR62105: SECURITY APAR - CVE-2020-4325 - USING THE GLOBAL TEAMS REST API CAUSES OUTOFMEMORY EXCEPTIONS

Direct link to fix

pfs.20001.delta.repository

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The IBM Process Federation Server Global Teams REST API does not
properly terminate the threads that it creates to retrieve
Global Teams information from the federated systems. As a
consequence, the Java Virtual Machine can't recover the memory
used by those threads, which leads to an OutOfMemory exception
when the Process Federation Server Global Teams REST API is used
 extensively.

PRODUCTS AFFECTED
IBM Business Automation Workflow

Local fix

  • 



Problem summary


    

  • No additional information is available.

    



Problem conclusion


    

  • A fix that ensures Process Federation Server properly terminates
 threads created by the Global Teams REST API is planned for
inclusion in a future release of Process Federation Server. An
interim fix will be released for each version of Process
Federation Server released after V18.0.0.1, including V18.0.0.1.

    



Temporary fix


    

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    JR62105
    • 

  • Reported component name
    BUS AUTO WORKFL
    • 

  • Reported component ID
    5737H4100
    • 

  • Reported release
    I00
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2020-03-09
    • 

  • Closed date
    2020-06-26
    • 

  • Last modified date
    2020-06-26
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    BUS AUTO WORKFL
    • 

  • Fixed component ID
    5737H4100
    • 



Applicable component levels


    








      
              
                            

              

              [{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS8JB4","label":"IBM Business Automation Workflow"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"18.0.0.0"}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            04 October 2021
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback