APAR status
Closed as program error.
Error description
Error Message: N/A . Stack Trace: N/A .
Local fix
Problem summary
An optimal solution for KDB Weak Password Recovery Vulnerability
Problem conclusion
Salt the KDB file to prevent dictionary attacks on the password and so we do a new salt every time we set the password . This APAR will be fixed in the following Java Releases: 8 SR5 FP10 (8.0.5.10) 6 R1 SR8 FP60 (6.1.8.60) 6 SR16 FP60 (6.0.16.60) 7 SR10 FP20 (7.0.10.20) 7 R1 SR4 FP20 (7.1.4.20) . Contact your IBM Product's Service Team for these Service Refreshes and Fix Packs. For those running stand-alone, information about the available Service Refreshes and Fix Packs can be found at: https://www.ibm.com/developerworks/java/jdk/
Temporary fix
Comments
APAR Information
APAR number
IJ03800
Reported component name
SECURITY
Reported component ID
620700125
Reported release
270
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2018-01-30
Closed date
2018-02-05
Last modified date
2018-02-08
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fixed component name
SECURITY
Fixed component ID
620700125
Applicable component levels
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"270","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]
Document Information
Modified date:
07 December 2020