Readme File for IBM^® Platform Symphony 7.1.1 Interim Fix 493457

Readme File for: IBM Platform Symphony

Product Release: 7.1.1

Update Name: Interim Fix 493457

Fix ID: sym-7.1.1-build493457

Publication Date: June 8, 2018

This interim fix resolves security issues relating to Arbitrary Remote Code Execution (RCE) in IBM Platform Symphony 7.1.1.

Contents

1. List of fixes

2. Download location

3. Product and components affected

4. Installation and configuration

5. Copyright and trademark information

1.    List of fixes

APAR: P102505

2.    Download location

Download interim fix 493457 from the following location: https://www.ibm.com/eserver/support/fixes/

3.    Product and components affected

Component name, Platform, Fix ID:                                                   

PMC, Linux x86_64, sym-7.1.1-build493457

4.    Installation and configuration

Follow the instructions in this section to download and install this interim fix in your cluster.

System requirements

Linux x86_64

Installation

1.     Log on to the master host as the cluster administrator and stop the WEBGUI service:

$ egosh user logon -u Admin -x Admin

$ egosh service stop WEBGUI

2.     Log on to each management host in your cluster as the cluster administrator.

3.     Delete the following file:

$EGO_TOP/wlp/usr/servers/gui/apps/soam/7.1.1/symgui/generaltable/getDeviceInfo.jsp

4.     Delete all subdirectories and files from the following directories:

$ rm -rf $EGO_TOP/gui/work/*

$ rm -rf $EGO_TOP/gui/workarea/*

$ rm -rf $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/*

5.     Clear your browser cache.

6.     Start the WEBGUI service:

$ egosh service start WEBGUI

5.    Copyright and trademark information

© Copyright IBM Corporation 2018

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.