Potential Data Breach - OAAM Asking For Debit Card Information
Last updated on MARCH 08, 2017
Applies to:Oracle Adaptive Access Manager - Version 184.108.40.206.0 and later
Information in this document applies to any platform.
The customer is running into the issue described in Doc ID 1480981.1 (OAAM 11g Forgot Password Flow for Unregistered Users: How to Configure Not to Show Card & Pin Page). The question is if a user does input his/her ATM and pin number on the card and pin page, is this information being stored anywhere? And, if so, where are all the possible places where this information is stored/logged in?
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms