JSA10325 - CERT-CSA Option Vulnerability, Released 3/10/03

If you have configured CSA in "Enabled" mode for one or more groups, then it is possible for an authenticated user in one of those groups to access servers that are not listed in the "Application List". If you have configured CSA in "Enabled, and user can add applications" mode or configured in "Disabled" mode then there is no exposure.

Please see attached .pdf file for complete bulletin text.

All customers running any PCS Software version earlier than 3.3.1 GA Patch 1 (build 5847) should upgrade to 3.3.1 GA Patch 1. All customers running 4.0 GA (build 5531) should upgrade to 4.0 GA Patch 1 (build 5871).