Access Log Show /cas/v1/tickets Request that Includes the Username and Password in Plain Text
(Doc ID 2799449.1)
Last updated on AUGUST 19, 2021
Applies to:Oracle WebCenter Sites - Version 220.127.116.11.0 and later
Information in this document applies to any platform.
Noticed in access log, there is /cas/v1/tickets request, that includes the username and password in plain text.
For example, in access log see:
This cas request is being made in order to use the WebCenter Sites REST api.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document