js files are still a popular way to propagate malware. js (yes, javascript), as it's installer rather than a traditional MSI so it's a bit fiddly to automate and teaches some bad habits since. It provides a Java based platform-independent interface which runs on most operating systems that support Java including Linux, Mac and Windows. The biggest annoyance with the new client is it uses. Just before we hit the holiday break, the extremely severe Apache Log4j security vulnerability was disclosed to the world, resulting in a frantic effort to patch servers, desktops, refrigerators just.
We use Adoptium JRE 17 and it works fine (this is also the Java release mentioned in some of the ACS docs too iirc, but really any of the modern java versions should be fine, be it MS, Amazon, OpenJDK etc.). There will, however, be fixes coming to other vulnerable components, including IWS, IAS, and IBM i Access Client Solutions (ACS), IBM says. IBM Watson IoT (OpenSSL) IBM Watson IoT (Utility) iPlanet Java (Generic). (you will need a valid IBM account to access the downloads). Citrix Access Gateway Citrix Access Essentials Citrix NetScaler VPX Cobalt. Fellow AS/400 user here, check you are on the latest version of IBM's ACS client, they deprecated the 'old' version back in 2019 or so (it pretty much wont install on Windows 10 these days), but the replacement quite happily works with pretty much any modern java version:
