Audit - Risk - zAssure Vulnerability - Program PXMLGRCC

Products

• Detector for DB2 for z/OS

Issue/Introduction

The audit z/Assure product identified the program PXMLGRCC in the Vulnerability report flag with CVSS score of 8.4. The Vulnerability was reported in the following way:

Q4/2021 Scan

Vulnerability identified

LPAR

ASSET ID

Scan type

Vulnerability type

SVC #/ESR #

Program

Entry point

Location

CVSS

Feature Team Owner

Product

Vendor

12/13/2021

TSPlex

s7gp-zate

2300318

PC

SA1

PXMLGRCC

CONSOLE

8.4

DB2

Database Management Solutions for DB2

Broadcom

 

Environment

Release : 20.0

Component : Execution Manager

Resolution

You have to contact the z/Assure product team and a fix will be provided to resolve the false positives in Xmanager program PXMLGRCC. With the fix applied no new vulnerabilities should be found in the z/Assure report.