Credit Card Number Security Issue With Event Browser (Doc ID 744874.1)

Last updated on JULY 05, 2013

Applies to:

Oracle Communications Billing and Revenue Management - Version 7.2.1.0.0 to 7.2.1.0.1 [Release 7.2.1]
Information in this document applies to any platform.
***Checked for relevance on 05-July-2013***

Symptoms

When credit card number masking is set, it displays the masked card number correctly in event browser's details.  But after exporting it to a file, the file content shows all 16 digits without masking.

Example :

In event browser's event details, it displays the card number as ****-****-****-3331. But after exporting it to a file, it displays all 16 digits without masking.

This happens for all credit card events like authorization,validation, Conditional deposit event etc..


Steps to Reproduce :

1. Open a credit card account.
2. Go to event browser and search for events.
3. Select a "Conditional Deposit" or "Validation" event.
4. Export it to an output file, verify that the output text file contains the entire credit card number.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms