APAR status
Closed as program error.
Error description
IBM InfoSphere Information Server is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents.
Local fix
N/A
Problem summary
********************************************* APAR Users Affected: ********************************************* InfoSphere Information Governance Catalog users. ********************************************* APAR Problem Description: ********************************************* IBM InfoSphere Information Server is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. ********************************************* APAR Recommendation: ********************************************* Apply the fix for JR64524 *********************************************
Problem conclusion
Apply the fix for JR64524
Temporary fix
Comments
APAR Information
APAR number
JR64524
Reported component name
INFO SRVR PLATF
Reported component ID
5724Q3612
Reported release
B71
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2022-01-19
Closed date
2022-11-02
Last modified date
2022-11-02
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
INFO SRVR PLATF
Fixed component ID
5724Q3612
Applicable component levels
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSZJPZ","label":"InfoSphere Information Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"11.7","Line of Business":{"code":"LOB10","label":"Data and AI"}}]
Document Information
Modified date:
02 November 2022