log4j Vulnerability - BA Client Fix and Workaround
The BA Client Webclient component is affected by the log4j issue.
Workaround
To deactivate the webclient function do the following:
Linux/UNIX:
change in dsm.sys the line "
managedservices webclient schedule
" to "managedservices schedule
"restart the dsmcad deamon
Windows:
stop the webclient service with "
net stop 'TSM Client Remote Agent
'" or select "stop" in services.msc for this service.configure this service with start type "manual" to prevent automatic start after reboot.
Fix
IBM fixed the log4j vulnerability in Spectrum Protect BA Client on December 17th and published versions 8.1.13.1 and 7.1.8.13
Info about fixes:
https://www.ibm.com/support/pages/node/589103
https://www.ibm.com/support/pages/ibm-spectrum-protect-downloads-latest-fix-packs-and-interim-fixes
Download:
http://ftp.software.ibm.com/storage/tivoli-storage-management/patches/
Last updated