Patch To Correct Error Information Disclosure in MWM/ORS v2.2.0.3 (Doc ID 2250923.1)

Last updated on APRIL 06, 2017

Applies to:

Oracle Utilities Mobile Workforce Management - Version 2.2.0.3.13 to 2.2.0.3.13 [Release 2.2]
Information in this document applies to any platform.

Symptoms

On : 2.2.0.3.13 version, Alert

ACTUAL BEHAVIOR
---------------
ERROR INFORMATION DISCLOSURE - Vulnerability Identified in MWM

Security team did an assessment on MWM and they identified ERROR INFORMATION DISCLOSURE - Vulnerability.

The assessment team identified one instance of error information disclosure in the MWM application.
By issuing an invalid request to the application, the assessment team observed verbose error messages including stack traces in the application’s response

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms