=============================================================================
Run Date: OCT 13, 2020                     Designation: PSO*7*600
Package : PSO - OUTPATIENT PHARMACY           Priority: Mandatory
Version : 7       SEQ #505                      Status: Released
                  Compliance Date: NOV 12, 2020
=============================================================================


Subject: Inbound ePrescribing Fortify Mitigation Q4 2019

Category: 
  - Informational
  - Other

Description:
============

 The Inbound eRx JAVA application is a component of the PRE IEP program
 that provides the capability to receive inbound eRx's from an external 
 provider. The JAVA application provides a user interface that allows end 
 users to manage and monitor eRx processing from external sources.
  
 The purpose of this patch is fixing fortify mitigation.
  
   
 Defect Tracking System Ticket(s) & Overview:
 --------------------------------------------
 N/A
  
  
 Problem:
 --------
 Inbound eRx contains Java Enterprise components which are subject to 
 compliance with VA security and code quality standards to maintain 
 authority to operate (ATO). Routine Fortify scanning and remediation is 
 performed to maintain compliance. Patch PSO*7*600 was initiated to 
 identify and remediate security vulnerabilities and code quality issues 
 in the current Java code.
  
 Resolution:
 -----------
 Patch PSO*7*600 for Inbound eRx version INB_ERX-3.1.0.008 includes code 
 fixes to bring Inbound eRx application into compliance with VA Security 
 and Code Quality Standards. The application code has been scanned with 
 the Fortify tool to identify security vulnerabilities and code quality 
 issues. Code fixes have been applied to mitigate these findings and the 
 application has been validated by the VA Software Assurance Team to 
 ensure compliance with the standards. No application functionality has 
 changed.
  
  
 Test Sites:
 -----------
 Dublin VAMC, Dublin GA
  
  
  
 Software and Documentation Retrieval Instructions:
 -------------------------------------------------
 Documentation describing the new functionality is included in this 
 release. Documentation can be found on the VA Software Documentation 
 Library at: https://www.domain.ext/vdl/. Documentation can also be 
 obtained at https://download.vista.domain.ext/index.html/SOFTWARE.
  
  
 Title                         File Name                     
 ------------------------------------------------------------
 Deployment Installation       pso_7_0_p600_dibr.PDF           
 Back-Out and Rollback Guide
                             
 - Inbound ePrescribing      
  
 Pre-Installation Instructions:
 --------------------------
 None

Routine Information:
====================
No routines included.

=============================================================================
User Information:
Entered By  :                               Date Entered  : FEB 26, 2020
Completed By:                               Date Completed: OCT 09, 2020
Released By :                               Date Released : OCT 13, 2020
=============================================================================


Packman Mail Message:
=====================

No routines included