WebSphere Admin Console only shows WAS_HOME directory when browsing WAR/EAR files using “Remote File system”

Problem:

WebSphere Admin Console only shows WAS_HOME directory when browsing WAR/EAR files using “Remote File system”

 

Resolution:

This change is due to following Security Bulletin from IBM:

 

https://www.ibm.com/support/pages/security-bulletin-information-disclosure-websphere-application-server-cve-2017-1743

 

To get access to all directories, please add custom properties “com.ibm.ws.management.fileservice.allAccess” and “com.ibm.ws.console.webserver.anypath” property to “true” on Deployment Manager and the Node Agents.

 

In the WAS admin console,

 

Go to System administration –> Deployment manager –> Java and Process Management –> Process definition –> Java Virtual Machine –> Custom properties

 

Click the New button and enter the following:

Name: com.ibm.ws.management.fileservice.allAccess

Value : true

Click the New button and enter the following:

Name: com.ibm.ws.console.webserver.anypath

Value : true

 

Click Apply, then Save your changes to the master configuration.

 

Go to System administration –> Node Agents –> node_name –> Java and Process Management –> Process definition –> Java Virtual Machine –> Custom properties

 

Click the New button and enter the following:

Name: com.ibm.ws.management.fileservice.allAccess

Value : true

Click the New button and enter the following:

Name: com.ibm.ws.console.webserver.anypath

Value : true

 

Click Apply, then Save your changes to the master configuration.

 

Restart all the WebSphere services after setting the properties.