Unable to Access WebCenter Portal After Applying the July 2022 Bundle Patches or Later
(Doc ID 2887414.1)
Last updated on MAY 31, 2023
Applies to:
Oracle WebCenter Portal - Version 12.2.1.3.0 to 12.2.1.4.0Information in this document applies to any platform.
Symptoms
Accessing WebCenter Portal shows either a blank page or the following error:
org.owasp.esapi.errors.ConfigurationException: java.lang.reflect.InvocationTargetException Encoder class (org.owasp.esapi.reference.DefaultEncoder) CTOR threw exception.
The WebCenter Portal .out file shows the following errors:
<DATE-TIME> <Warning> <oracle.adf.share.ADFContext> <BEA-000000> <Automatically initializing a DefaultContext for getCurrent. Caller should ensure that a DefaultContext is proper for this use. Memory leaks and/or unexpected behaviour may occur if the automatic initialization is performed improperly. This message may be avoided by performing initADFContext before using getCurrent().>
ESAPI: WARNING: System property [org.owasp.esapi.opsteam] is not set
ESAPI: WARNING: System property [org.owasp.esapi.devteam] is not set
ESAPI: Attempting to load ESAPI.properties via file I/O.
ESAPI: Attempting to load ESAPI.properties as resource file via file I/O.
ESAPI: Found in 'org.owasp.esapi.resources' directory: /refresh/oracle/product/Middleware/wcportal/common/lib/ESAPI.properties
ESAPI: Loaded 'ESAPI.properties' properties file
ESAPI: SecurityConfiguration for Validator.ConfigurationFile.MultiValued not found in ESAPI.properties. Using default: false
ESAPI: SecurityConfiguration for Validator.ConfigurationFile not found in ESAPI.properties. Using default: validation.properties
ESAPI: Attempting to load validation.properties via file I/O.
ESAPI: Attempting to load validation.properties as resource file via file I/O.
ESAPI: Not found in 'org.owasp.esapi.resources' directory or file not readable: /refresh/oracle/product/Middleware/wcportal/common/lib/validation.properties
ESAPI: Not found in SystemResource Directory/resourceDirectory: .esapi/validation.properties
ESAPI: Not found in 'user.home' (/home/oracle) directory: /home/oracle/esapi/validation.properties
ESAPI: Loading validation.properties via file I/O failed.
ESAPI: Attempting to load validation.properties via the classpath.
ESAPI: SUCCESSFULLY LOADED validation.properties via the CLASSPATH from '/ (root)' using current thread context class loader!
ESAPI: SecurityConfiguration for ESAPI.printProperties not found in ESAPI.properties. Using default: false
ESAPI: SecurityConfiguration for Encryptor.CipherTransformation not found in ESAPI.properties. Using default: AES/CBC/PKCS5Padding
ESAPI: SecurityConfiguration for ESAPI.Validator not found in ESAPI.properties. Using default: org.owasp.esapi.reference.DefaultValidator
ESAPI: SecurityConfiguration for ESAPI.Logger not found in ESAPI.properties. Using default: org.owasp.esapi.logging.java.JavaLogFactory
<DATE-TIME> <Error> <HTTP> <BEA-101020> <[ServletContext@<context>[app:webcenter module:/webcenter path:null spec-version:3.1]] Servlet failed with an Exception
java.lang.ExceptionInInitializerError
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:264)
at org.owasp.esapi.util.ObjFactory.loadClassByStringName(ObjFactory.java:158)
at org.owasp.esapi.util.ObjFactory.make(ObjFactory.java:81)
at org.owasp.esapi.ESAPI.logFactory(ESAPI.java:139)
Truncated. see log file for complete stacktrace
Caused By: org.owasp.esapi.errors.ConfigurationException: SecurityConfiguration for Logger.LogEncodingRequired not found in ESAPI.properties
at org.owasp.esapi.reference.DefaultSecurityConfiguration.getBooleanProp(DefaultSecurityConfiguration.java:1293)
at org.owasp.esapi.logging.java.JavaLogFactory.<clinit>(JavaLogFactory.java:58)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:264)
at org.owasp.esapi.util.ObjFactory.loadClassByStringName(ObjFactory.java:158)
Truncated. see log file for complete stacktrace
>
ESAPI: WARNING: System property [org.owasp.esapi.opsteam] is not set
ESAPI: WARNING: System property [org.owasp.esapi.devteam] is not set
ESAPI: Attempting to load ESAPI.properties via file I/O.
ESAPI: Attempting to load ESAPI.properties as resource file via file I/O.
ESAPI: Found in 'org.owasp.esapi.resources' directory: /refresh/oracle/product/Middleware/wcportal/common/lib/ESAPI.properties
ESAPI: Loaded 'ESAPI.properties' properties file
ESAPI: SecurityConfiguration for Validator.ConfigurationFile.MultiValued not found in ESAPI.properties. Using default: false
ESAPI: SecurityConfiguration for Validator.ConfigurationFile not found in ESAPI.properties. Using default: validation.properties
ESAPI: Attempting to load validation.properties via file I/O.
ESAPI: Attempting to load validation.properties as resource file via file I/O.
ESAPI: Not found in 'org.owasp.esapi.resources' directory or file not readable: /refresh/oracle/product/Middleware/wcportal/common/lib/validation.properties
ESAPI: Not found in SystemResource Directory/resourceDirectory: .esapi/validation.properties
ESAPI: Not found in 'user.home' (/home/oracle) directory: /home/oracle/esapi/validation.properties
ESAPI: Loading validation.properties via file I/O failed.
ESAPI: Attempting to load validation.properties via the classpath.
ESAPI: SUCCESSFULLY LOADED validation.properties via the CLASSPATH from '/ (root)' using current thread context class loader!
ESAPI: SecurityConfiguration for ESAPI.printProperties not found in ESAPI.properties. Using default: false
ESAPI: SecurityConfiguration for Encryptor.CipherTransformation not found in ESAPI.properties. Using default: AES/CBC/PKCS5Padding
ESAPI: SecurityConfiguration for ESAPI.Validator not found in ESAPI.properties. Using default: org.owasp.esapi.reference.DefaultValidator
ESAPI: SecurityConfiguration for ESAPI.Logger not found in ESAPI.properties. Using default: org.owasp.esapi.logging.java.JavaLogFactory
<DATE-TIME> <Error> <HTTP> <BEA-101020> <[ServletContext@<context>[app:webcenter module:/webcenter path:null spec-version:3.1]] Servlet failed with an Exception
java.lang.ExceptionInInitializerError
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:264)
at org.owasp.esapi.util.ObjFactory.loadClassByStringName(ObjFactory.java:158)
at org.owasp.esapi.util.ObjFactory.make(ObjFactory.java:81)
at org.owasp.esapi.ESAPI.logFactory(ESAPI.java:139)
Truncated. see log file for complete stacktrace
Caused By: org.owasp.esapi.errors.ConfigurationException: SecurityConfiguration for Logger.LogEncodingRequired not found in ESAPI.properties
at org.owasp.esapi.reference.DefaultSecurityConfiguration.getBooleanProp(DefaultSecurityConfiguration.java:1293)
at org.owasp.esapi.logging.java.JavaLogFactory.<clinit>(JavaLogFactory.java:58)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:264)
at org.owasp.esapi.util.ObjFactory.loadClassByStringName(ObjFactory.java:158)
Truncated. see log file for complete stacktrace
>
NOTE:
The issue replicates in the following versions of Oracle WebCenter Portal:
- 12.2.1.4 with the WebLogic Patch Set Update or WebLogic Stack Patch Bundle from July 2022 or Later.
- 12.2.1.3 with the WebLogic Patch Set Update or WebLogic Stack Patch Bundle from July 2022 or Later.
STEPS:
The issue can be reproduced as follows:
- Apply any of the following patches:
- WebLogic July 2022 Patches:
Patch 34236279 : WLS PATCH SET UPDATE 12.2.1.4.220602
or
Patch 34373563 : WLS STACK PATCH BUNDLE 12.2.1.4.220711
- WebLogic October 2022 Patches or Later :
e.g.: Starting with the following WLS October 2022 patches or any new WLS patch :
Patch 34653267 : WLS PATCH SET UPDATE 12.2.1.4.220929
or
Patch 34689215 : WLS STACK PATCH BUNDLE 12.2.1.4.221011
- WebLogic July 2022 Patches:
- Start the domain.
- Access WebCenter portal.
Changes
Applied WebLogic Server patches From July 2022 or later.
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Changes |
Cause |
Solution |
References |