Once User Locked And Tries To Enter Valid/Invalid Password Within 24 Hours Of Locked Time Then User's Auto Unlock Period Gets Extended By More Than 24 Hours. (Doc ID 2827883.1)

Last updated on DECEMBER 13, 2021

Applies to:

Symptoms

ACTUAL BEHAVIOR
----------------------------
User gets locked after 3 invalid attempts. As per base functionality, user gets unlocked automatically after 24 hours. But issue is observed, when user tries to enter invalid/correct password within 24 hours then user's unlock time increases by 24 hours with current timestamp.

EXPECTED BEHAVIOR
--------------------------------
Once user locked after 3 invalid attempts of wrong password and tries to enter wrong/correct password within 24 hours then unlock period should not exceed more than 24 hours.

STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. Login to OBDX with Retail user
2. Enter invalid password for 3 times until user unlocked.
3. Try to login again with valid/invalid password within 24 hours.

BUSINESS IMPACT
---------------------------
The issue has the following business impact:
Due to this issue, user's locked period get extended even after 24 hours.

Changes

No changes in the environment, product, account or hardware triggers this problem.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.