WebSphere Security Exposure

["Neil Palmer" <neilp@xxxxxxxxxxx>]

>From SF98510   V5R1


  13. 02/02/23 An OS/400 security exposure has been identified when

               WebSphere security is enabled and configured with

               Local OS that may allow unauthorized access to

               WebSphere on iSeries. IBM strongly recommends that the

               WebSphere group PTFs for iSeries be ordered and applied

               immediately.  Alternatively, the customer may choose to

               not run WebSphere or run without Local OS.  WebSphere

               Group PTF information can be found at the following

               location:

               http://www-1.ibm.com/servers/eserver/iseries/software/
               websphere/wsappserver/services/service.htm

               If WebSphere security is enabled and configured with

               LTPA and you are using an iSeries Directory Server, you

               must apply OS/400 Hiper Security/Integrity LDAP PTFs to

               fix this problem.





...Neil