News archive for 2021

The WMACCESS product suite uses numerous free and open source software projects in the entire value chain from the development process to the operation in the company's own data centers.

Many of these projects are initially free of costs. The reason for this is that these projects should be publicly available to everyone. Despite this fact, free software should not be understood as free of costs.

The first definition of free software was first published in 1986 by "GNU's Bulletin Publication":

We would like to thank the community and especially the people who invest their time and will give something back again this year. We are happy to provide our knowledge and our time (e.g. by means of feature requests or bug reports) but also provide financial support; in 2021 to the following open source projects, among others::

Testssl.sh

Testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws and more.

@drwetter

Acme.sh

Acme.sh is a simple and powerful tool for automatically generating and issuing SSL certificates. By default, acme.sh is used to facilitate the generation and renewal of Let's Encrypt SSL certificates, but it also supports other free SSL certificates.

@neilpangxa

Let's Encrypt

Let's Encrypt is a free, automated and open certification authority that already provides TLS certificates for over 260 million websites.

@letsencrypt

Curl

Curl is a command line tool and library for transferring data with URLs (since 1998)

@badger

This week we received a few inquiries about the security vulnerability of Log4j (CVE-2021-44228) in connection with WMACCESS via Internet. With the following information we would like to contribute to transparency.

Was WMACCESS affected by the vulnerability?

WMACCESS was affected by using the Log4j library 2.13.3, but remote code execution was not possible due to other security measures.
See also: LunaSec article / Updates section

Has the vulnerability been fixed?

The vulnerability was closed for WMACCESS servers on 10.12.2021 at 15:27:01. A few minutes before, we informed via Twitter that the security fix will involve a short interruption in availability.
See also: @WMACCESS Twitter post

Was there a check to see if the vulnerability was exploited?

A review has been conducted. There were two attack attempts before the vulnerability was closed, but these were already prevented by the Java JDK we use. There were also no entries in the log of our firewall, although our firewall would of course have blocked such outgoing communication.

As described on our preliminary lump sum webpage, the preliminary lump sums in 2022, calculated for the year 2021, will be delivered on several dates.

WM Datenservice notified on the following dates:

• 11.01.2022
• 12.01.2022

For the preliminary lump sums for 2021, so-called "zero reports" will be published for all relevant investment funds due to the negative base interest rate. Due to the uniform zero values ​​for the 2021 preliminary lump sum, no corrections can occur.

Further information from WM Datenservice:

• Special information F25 from November 22, 2021

Note:

Please note that all customer and special information from WM Datenservice are password protected since 16.04.2012. If you do not have your login data available or not known, please contact WM Datenservice via E-Mail.

On October 25, 2021 the 96. WM Release will become effective. We would like to inform you about some upcoming alterations beforehand and corresponding impacts in WMACCESS.

Update 27.09.2021: WM Datenservice published the special information F01b on 17.09.2021. Three new fields were announced with this special information for the 96. WM Release, which will be integrated into the MiFID II - target market query profile.

New field in the query profile Securities master data (G)

• GD096C Type of index

New fields in the query profile Stock Exchange Eligibilities (X)

• XD171B Multicurrencytrading identifier
• XV801 Multicurrency

New fields in the query profile MiFID II - Target market

• GD350W Sustainability - Preferences
• GD350Y Sustainability - Focus
• GV9W9 Sustainability - Label

Frozen fields

On October 25, 2021 the following data fields will be frozen:

• DD029 Last trading day of the derivative
• DD030 Last trading month of the derivative
• DD031 Last trading year of the derivative

Update 17.09.2021: These three fields will be removed from the detail display of the query profile (D) Options & Futures (O&F).
Background: These fields are redundant to the WM field DD037 (Last trading day), which as a real date field represents the content of the three frozen fields.

Further information from WM Datenservice:

• Customer information K12 from August 4, 2021
• Special information F01b from September 17, 2021

Note:

Please note that all customer and special information from WM Datenservice are password protected since 16.04.2012. If you do not have your login data available or not known, please contact WM Datenservice via E-Mail.

On June 28, 2021 the 95. WM Release will become effective. We would like to inform you about some upcoming alterations beforehand and corresponding impacts in WMACCESS.

New fields in the query profile Securities master data (G)

• GD061 ITIN (International Token Identification Number)
• GD189B Typisation of structured products
• GD279C Liquidity tool - redemption restrictions ID
• GD279D Liquidity tool - redemption period

New field in query profile Fund Classifications / AIF

• GV1F7 Investment fund status certificate pursuant to section 7(3)1 of the Investment Tax Act in connection with section 7(4)3 of the Investment Tax Act

New field in the query profile Investment Funds Prices (I)

• ID110 Liquidity tool - quota redemption restrictions

Frozen fields

On June 28, 2021 the following data fields will be frozen:

• GD237A Share profit publication (Sec. 5(2)4 of the Investment Tax Law)
• GD237B Real estate profit publication (Sec. 5(2)4 of the Investment Tax Law)
• GV966 Underlying instruments of conversions for the consideration of tax relevant data
• HV211 Deviating request period
• XD997 General text - corporate actions data
• XD998 Master data general text

The mentioned fields will remain included in the respective detail display, in grayed out form.

Further information from WM Datenservice:

• Customer information K07 from April 7, 2021
• Customer information F11 Liquidity management tools (LMT) Information for the liquidity risk management of investment funds from April 8, 2020
• Customer information F14 WM Data on the Reform of the German Investment Taxation – Part XXIV – Status Certificates as per Section 7(3) InvStG from Mai 4, 2020

Note:

Please note that all customer and special information from WM Datenservice are password protected since 16.04.2012. If you do not have your login data available or not known, please contact WM Datenservice via E-Mail.

On February 22, 2021 the 94. WM Release will become effective. We would like to inform you about some upcoming alterations beforehand and corresponding impacts in WMACCESS.

New fields in the query profile Securities master data (G)

• GD924E Fulfillment type
• GD924F condition for population type
• GD924G Participation factor
• GD924H Partizipation factor in percent
• GV1E3 Ratio and start value
• GV1E4 Thresholds
• GV1E5 Repayment modality amount type
• GV1E6 Deviating information on the financial instrument to be delivered

Frozen fields

No data fields, currently used in WMACCESS, will be frozen with this WM Release.

Further information from WM Datenservice:

• Customer information K27 from December 2, 2020

Note:

Please note that all customer and special information from WM Datenservice are password protected since 16.04.2012. If you do not have your login data available or not known, please contact WM Datenservice via E-Mail.

« 20202022 »