View and hiding password in Top Secret

Products

• Top Secret

Issue/Introduction

Does Top Secret of allow the viewing and hiding of users passwords?

Environment

Release : 16.0

Component : Top Secret for z/OS

Resolution

At older releases of Top Secret, passwords could be viewed and hidden via PWVIEW Top Secret control option.

Because of the increase of security concerns and strict security stands, it was determined that allowing the viewing of passwords is a potential exploit opportunity. No one other than the user should need to know their password.

The ability to view password was removed from Top Secret as an enhancement to the product.

If a user forgets their password, their password should be reset with a temporary password and expired immediately forcing the user to change the password at first use.