ZACS INTEGRITY SCAN for Compress for z/OS
search cancel

ZACS INTEGRITY SCAN for Compress for z/OS

book

Article ID: 204256

calendar_today

Updated On:

Products

Compress Data Compression for MVS

Issue/Introduction

ZACS integrity scan found potential vulnerabilities whereby unauthorized 
users could circumvent authorized programs use of assorted SVCs to      
access or modify user supplied storage.                                 

ZACS integrity scan displays the following:                     
*** POTENTIAL VULNERABILITY FOUND IN SVC 00000013 ***           
ABEND COMPLETION CODE: 0C4000  REASON CODE: 00000011            
PSW: 070C2000 8977617C   NO MODULE INFO WAS AVAILABLE           
INSTR LEN: 04  FAILING INSTR: 501D 4320 A011 9180 7000 1F00     
TRANSLATED INSTR: TM      0(R7),128                             
SOURCE ADDRESS CAUSING TRANSLATION EXCEPTION: 00000000_00027800 
CVSS: 6.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)        

Environment

z/OS 2.3 and above

Compress for MVS 5.5 and above

Resolution

SO14480

ZACS INTEGRITY SCAN FOUND SVC POTENTIAL VULNERABILITIES 

Please apply this solution and recycle Compress. Be sure to refresh any load libraries related to Compress if they are in the LNKLST

Additional Information

link to apar download page

https://support.broadcom.com/download-center/solution-details-new.html?sku_code=SMCOMV00200&release=5.5