================================================================================= == == == IBM(R) WebSphere(R) Sensor Events 7.0 == == Version 7.0 == == Software Fix - APAR IC83623 == == README == == == ================================================================================= CONTENTS --------- 1.0 ABOUT THIS README FILE 2.0 INCLUDED THIS INTERIM FIX 3.0 INSTALLATION 4.0 UNINSTALLATION 5.0 TRADEMARKS 1.0 ABOUT THIS README FILE --------------------------- This README provides information about the patch available in this Fix. This fix can be installed on IBM(R) WebSphere(R) Sensor Events 7.0 2.0 INCLUDED IN THIS FIX ---------------------------- The following reported program defects are fixed in this update: o IC83623: P001414 XSS, File Path Traversal and Insecure HTTP methods P001538 Cross site scripting vulnerability found in deferredView.jsp XSS issue in searchView.jsp 3.0 INSTALLATION ----------------- 1. Create folder in ibm_help called maintenance 2. Move folders org.eclipse.help.base_3.3.XXX.vXXXXXXX and org.eclipse.help.webapp_3.3.XXX.vXXXXXXX to ibm_help/maintenance 3. Download the patch and extract for appropropriate OS IBM-Help-Win32_patch4_3.4.3.v20120416-1215.zip for Windows, IBM-Help-AIX64_patch4_3.4.3.v20120416-1215.tar.gz for AIX64 or IBM-Help-AIX64(LINUX32)_patch4_3.4.3.v20120416-1215.tar for Linux32 4. Extract fix archive file folder eclipse from ibm_help directory and move SNSREVTS-7.0-MULTI-IC83623.fxtag to ibm_help/maintenance 4.0 UNINSTALLATION ------------------- 1. Delete from ibm_help/eclipse/plugins folders org.eclipse.help.base_3.3.XXX.vXXXXXXX and org.eclipse.help.webapp_3.3.XXX.vXXXXXXX 1. Copy from ibm_help/maintenance directories org.eclipse.help.base_3.3.XXX.vXXXXXXX and org.eclipse.help.webapp_3.3.XXX.vXXXXXXX to ibm_help/eclipse/plugins 2. Delete the file located at: ibm_help/maintenance/SNSREVTS-7.0-MULTI-IC83623.fxtag 5.0 TRADEMARKS ---------------- IBM and WebSphere are registered trademarks of International Business Machines Corporation in the United States, other countries, or both. (C)Copyright IBM Corporation 2009. All Rights Reserved. Note to U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.