My Oracle Support Banner

11i INVIDITM updates to mtl_system_items_b incorrectly populate last_updated_by and created_by columns causing audit / security vulnerability (Doc ID 416467.1)

Last updated on AUGUST 15, 2021

Applies to:

Oracle Item Master - Version 11.5.8 to 11.5.10.0 [Release 11.5]
Information in this document applies to any platform.
INVIDITM

Symptoms

Within Oracle Applications items assigned to local orgs through organization assignment tab
(Master Items form) copy the created_by and last_updated_by columns from item record per master organization.

STEPS TO REPRODUCE
Inventory responsibility
Open Master Items form.
Create item.
Save.
Apply template
Save.
View record history.
Click Organization Assignment tab and copy item to local org.
Open item in local org and view record history.
Same can be seen in query mode looking at mtl_system_items_b records.


BUSINESS IMPACT
Cannot tell who is making these changes.


Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.