=============================================================================
Run Date: APR 26, 2023                     Designation: WEBP*1*29
Package : WEBP - PATIENT CENTERED MANAGEMENT  Priority: Mandatory
Version : 1        SEQ #28                      Status: Released
                  Compliance Date: MAY 27, 2023
=============================================================================


Subject: GENERAL PCMM HOTFIXES

Category: 
  - Informational

Description:
============

 The purpose of the patch, WEBP*1.0*29, is to provide a security hot fix 
 to remove log4j vulnerability within cissUserManagement.ear.
 Patched PCMM Attended EAR to modify whitelist and fix reports menu in 
 PCMM Web.
 **********************************************************************
  
 Patch Components:
 ----------------- 
 N/A
  
 File Name                               Description
 =========================================================
 N/A
    
 Files & Fields Associated:
  
 File Name (Number)      Field Name (Number)     New/Modified/Deleted
 ------------------      -------------------     --------------------
 N/A
   
 Forms Associated:
   
 Form Name               File #                  New/Modified/Deleted
 ---------               ------                  --------------------
 N/A
   
 Mail Groups Associated:
   
 Mail Group Name                                 New/Modified/Deleted
 ---------------                                 --------------------
 N/A
   
 Option Name             Type                    New/Modified/Deleted
 -----------             ----                    --------------------
 N/A
                                                       
 Protocols Associated:
   
 Protocol Name           New/Modified/Deleted
 -------------           --------------------
 N/A
   
 Security Keys Associated:
   
 Security Key Name
 -----------------
 N/A
   
 Templates Associated:
   
 Template Name   Type    File Name (Number)      New/Modified/Deleted
 -------------   ----    ------------------      --------------------
 N/A
   
 Additional Information:
 N/A
    
 New Service Requests (NSRs):
 ----------------------------
 N/A
    
 Patient Safety Issues (PSIs):
 -----------------------------
 N/A
    
  
 Defect Tracking System Ticket(s) & Overview:
 --------------------------------------------
  
  
 Problem:
 -------
 Found log4j vulnerability within cissUserManagement.ear. 
  
 Resolution
 ----------
 Removed log4j vulnerability within cissUserManagement.ear.
  
 Problem:
 -------
  
 Link to Reports menu is not working.
 Resolution
 ----------
  
 Patched PCMM Attended EAR to modify whitelist and fix reports menu in 
 PCMM Web.
  
 Test Sites: 
 -----------
 Memphis - VA Medical Center  (Memphis, TN)
 Roseburg - Healthcare System (Roseburg, OR)
  
  
 Software and Documentation Retrieval Instructions: 
 --------------------------------------------------
 There is no new functionality included in this release. Documentation can 
 be found on the VA Software Documentation 
 Library at: https://www.domain.ext/vdl/. Documentation can also be obtained 
 at https://download.vista.domain.ext/index.html/SOFTWARE.
  
 Documentation Title                                 File Name
 ---------------------------------------------------------------------
 Deployment, Installation Back-Out,         WEBP_1.0_29_DIBRG.DOCX
 and Rollback Guide                         WEBP_1.0_29_DIBRG.PDF
  
 --------------------------------------------------------------------- 
 PCMM Web Version Description               WEBP_1.0-29_VDD.DOCX
 Document                                   WEBP_1.0-29_VDD.PDF
  
  
 Patch Installation: 
 ===================
 PCMM Web patch, WEBP*1*29, is a centrally managed web-based application
 and will be implemented and deployed to a central web server. No
 installation is required by sites.
  
 Pre/Post Installation overview:
 -------------------------------
 See WEBP_1.0_29_DIBRG.PDF for additional information.
  
  
 Pre-Installation Instructions: 
 ------------------------------
  
 Installation Instructions: 
 -------------------------
 ******************************************************************
 **  PLEASE NOTE: THERE IS NO INSTALLATION FOR THIS PATCH.       **
 ******************************************************************
  
 This informational patch, WEBP*1.0*29, is for PCMM Web. Installation is 
 done on a centralized server. 
  
 Please refer to the WEBP_1.0_29_DIBRG.PDF for more details.
  
 Post-Installation Instructions:
 -----------------------------
 N/A
  
 Back-Out Plan:
 --------------------------
 Backout plan is provided as part of deployment guide detailed in the 
 Deployment, Installation Back-Out, and Rollback Guide 
 (WEBP_1.0_29_DIBRG.PDF).
  
  
 Routine Information:
 ====================
  
  
 No routines included.

Routine Information:
====================
No routines included.

=============================================================================
User Information:
Entered By  :                               Date Entered  : JAN 06, 2023
Completed By:                               Date Completed: APR 25, 2023
Released By :                               Date Released : APR 26, 2023
=============================================================================


Packman Mail Message:
=====================

No routines included