11i INVIDITM updates to mtl_system_items_b incorrectly populate last_updated_by and created_by columns causing audit / security vulnerability
(Doc ID 416467.1)
Last updated on JULY 08, 2020
Applies to:Oracle Item Master - Version 11.5.8 to 22.214.171.124 [Release 11.5]
Information in this document applies to any platform.
Within Oracle Applications items assigned to local orgs through organization assignment tab
(Master Items form) copy the created_by and last_updated_by columns from item record per master organization.
STEPS TO REPRODUCE
Open Master Items form.
View record history.
Click Organization Assignment tab and copy item to local org.
Open item in local org and view record history.
Same can be seen in query mode looking at mtl_system_items_b records.
Cannot tell who is making these changes.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document