============================================================================= Run Date: JUL 08, 2025 Designation: PRC*5.1*243 Package : PRC - IFCAP Priority: Mandatory Version : 5.1 SEQ #210 Status: Released Compliance Date: AUG 07, 2025 ============================================================================= Subject: PRCHL GUI DECOMMISSION Category: - Informational Description: ============ The PRC Logistics Data Tool Application (formerly known as Logistics GUI Reporting tool) is no longer in use and has an exposed security vulnerability. This patch informs of the decommission and removal of this product effective on July 22, 2025. Patch PRC*5.1*243 is an informational patch only. EHRM Impact Statement: --------------------------------- No impact. Informational only. Patch Components: -------------------------- Files & Fields Associated: File Name (Number) Field Name (Number) New/Modified/Deleted ------------------ ------------------- -------------------- N/A Forms Associated: Form Name File Number New/Modified/Deleted ---------------- ---------------- ------------------------------- N/A Mail Groups Associated: Mail Group Name New/Modified/Deleted ------------------------ ------------------------------- N/A Options Associated: Option Name Type New/Modified/Deleted ------------------ ------ ------------------------------- N/A Protocols Associated: Protocol Name New/Modified/Deleted -------------------- ------------------------------- N/A Security Keys Associated: Security Key Name ------------------------- N/A Templates Associated: Template Name Type File Name (Number) New/Modified/Deleted --------------------- ------ --------------------------- -------------------------------- N/A Remote Procedures Associated: Remote Procedure Name New/Modified/Deleted ---------------------------------- ------------------------------- N/A Parameter Definitions Associated: Parameter Name New/Modified/Deleted ----------------------- -------------------------------- N/A Additional Information: ------------------------------- N/A New Service Requests (NSRs): N/A Patient Safety Issues (PSIs): N/A Defect Tracking System Ticket(s) & Overview: 1. SNOW Ticket: RITM14100887 - Request OIS Software Assurance Program services. Services include OIS-licensed Fortify tool support and related ATO and continuous monitoring activities. Problem: ------------ IFCAP requests the decommission of the PRCHL GUI [LOGISTICS DATA TOOL] option functionality in VistA. There is a SAML token handling security vulnerability in PRC Logistics Data Tool Application (formerly known as Logistics GUI Reporting tool). This product should no longer be used. Resolution: --------------- VA Applications staff will remove PRCHL GUI [LOGISTICS DATA TOOL] executable GUI from the VACS server(s). Removing the GUI application will not affect any downstream VistA routines or processes. The involved MUMPS routines (PRCHL4, PRCHL5, PRCHL6) will be unaffected. The PRCHL GUI has an associated menu option that is assigned in VistA in order to utilize this GUI. This menu option has not been removed at this point in time. Documents directly associated with this GUI are being archived in the VDL. Test Sites: ----------- N/A Change Order #: --------------- N/A Software and Documentation Retrieval Instructions: --------------------------------------------------------------------- Informational Only Other Software Files: N/A File Title File Name Format ------------------------------------------------------------------- N/A Documentation Title File Name -------------------------------------------------------------------------- Logistics Data Query Tool User Manual IFCP5_1LDQT_USER_MANUAL.PDF Logistics Data Query Tool Installation Guide IFCP5_1LDQT_INSTALLATION_GUIDE.PDF Patch Installation: ------------------------ N/A Pre/Post Installation Overview: ----------------------------------------- N/A Installation Instructions: ****** This is an informational patch ONLY. ****** ****** There is NO install to be done. ****** Post-Installation Instructions: --------------------------------------- N/A Back-Out/Roll Back Plan: --------------------------------- N/A Routine Information: ==================== No routines included. ============================================================================= User Information: Entered By : III Date Entered : MAY 29, 2025 Completed By: Date Completed: JUL 08, 2025 Released By : Date Released : JUL 08, 2025 ============================================================================= Packman Mail Message: ===================== No routines included