Date: 2017-06-15

OS: Windows

Etrack Incidents: 3920942

Errors/Problems Fixed:

3920942 - (JIRA ID: CFT-373) Critical Vulnerability in DI

For more information about the vulnerability please see https://www.veritas.com/content/support/en_US/security/VTS17-007.html
 
Applies to: Data Insight Management Server node.

Install/Uninstall Instructions:

Apply this hotfix to Data Insight Management Server node only.

This hotfix can be applied to Data Insight version 6.0 only.

FILE AFFECTED BY THIS PATCH:

Windows:
INSTALL_ROOT\tomcat\webapps\ROOT\WEB-INF\classes\com\symc\matrix\util\DataExplorerServlet.class
INSTALL_ROOT\tomcat\webapps\ROOT\data.jsp

By default, value of INSTALL_ROOT on Windows is "C:\Program Files\DataInsight".

Steps:

Log into Data Insight Management Server node and perform the following steps:
	
	1. Stop Data Insight services:
    	From the command prompt, issue the following command:
		
        net stop DataInsightWatchdog
        net stop DataInsightWeb
	net stop DataInsightComm
        net stop DataInsightConfig
	
	2.  Unzip the patch files to a temporary folder. In this folder, locate the
	"patches" folder. This folder contains all files for help application.
	
	Example: If you unzip hotfix to C:\temp, it will create the following folder
	under C:\temp:
	C:\TEMP\
	+---README
	+---patches
		+---DataExplorerServlet.class

	4.  Copy the patch files to the install directory.
	For example, if you are patching Management server installed at 
	"C:\Program Files\DataInsight", copy "DataExplorerServlet.class" file under 
	"C:\temp\patches" to "C:\Program Files\DataInsight\tomcat\webapps\ROOT\WEB-INF\classes\com\symc\matrix\util"
	replacing the original files with those from the patch.
	
	5. Start Data Insight services:
	From the command prompt, issue the following command:
	
        net start DataInsightConfig
        net start DataInsightComm
	net start DataInsightWeb
        net start DataInsightWatchdog
	
Additional Notes:
1. Apply this hotfix to Data Insight 6.0 only.