This is the third new release of IBM's Access Client Solutions, ACS, in the past two months. While my ACS does not alert for a new release (Help > Check for Updates), version 1.1.9.16 is mentioned on IBM's ACS webpage.
|
This version is to remedy the following, that has been an issue for all previous versions of ACS:
- STRPCCMD command sent from a compromised IBM i
- 5250 emulator macro that contains a malicious 'RunProgram' action
- 5250 multiple sessions file (.bch, .bchx) that contains a malicious 'Run' action
From this version each of the above actions will require user confirmation to run. A confirmation will be displayed, with "Yes" and "No" options. For the 5250 emulator macro 'RunProgram' action an additional "Cancel" option is offered to end the execution of the entire macro.



