Audit - Risk - zAssure Vulnerability - Xmanager program PXMLGRCC

Products

• Detector for DB2 for z/OS
• Database Management for DB2 for z/OS - SQL Performance Suite
• Database Management for DB2 for z/OS - Performance Suite

Issue/Introduction

The audit z/Assure product identified the program PXMLGRCC in the Vulnerability report flag with CVSS score of 8.4. The Vulnerability was reported in the following way:

Q4/2021 Scan

Vulnerability identified

LPAR

ASSET ID

Scan type

Vulnerability type

SVC #/ESR #

Program

Entry point

Location

CVSS

Feature Team Owner

Product

Vendor

12/13/2021

xxxxxx

xxxx-xxxx

2300318

PC

SA1

PXMLGRCC

CONSOLE

8.4

DB2

Database Management Solutions for DB2

Broadcom

 

Resolution

Contact the z/Assure product team and a fix will be provided to resolve the false positives in Xmanager program PXMLGRCC.
With the fix applied no new vulnerabilities should be found in the z/Assure report.