Supplier Portal - Creating New User Account Saves Clear text Password To User Registry.
Last updated on SEPTEMBER 02, 2016
Applies to:
PeopleSoft Enterprise SCM Strategic Sourcing - Version 9.2 to 9.2 [Release 9]Information in this document applies to any platform.
Symptoms
When a supplier creates a new user account through the supplier portal the password that is entered is saved to SUP_OB_USR_REG in cleartext.
Steps to reproduce the issue:
1-Sign in to supplier portal and create a new user.
2-Enter all the information and the password for that user.
3-Query record: PS_SUP_OB_USR_REG and notice that the password is not encrypted.
Cause
Sign In with your My Oracle Support account |
|
Don't have a My Oracle Support account? Click to get started |
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms