Supplier Portal - Creating New User Account Saves Clear text Password To User Registry.
(Doc ID 1988764.1)
Last updated on NOVEMBER 23, 2019
Applies to:PeopleSoft Enterprise SCM Strategic Sourcing - Version 9.2 to 9.2 [Release 9]
Information in this document applies to any platform.
When a supplier creates a new user account through the supplier portal the password that is entered is saved to SUP_OB_USR_REG in cleartext.
Steps to reproduce the issue:
1-Sign in to supplier portal and create a new user.
2-Enter all the information and the password for that user.
3-Query record: PS_SUP_OB_USR_REG and notice that the password is not encrypted.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document