Supplier Portal - Creating New User Account Saves Clear text Password To User Registry. (Doc ID 1988764.1)

Last updated on SEPTEMBER 02, 2016

Applies to:

PeopleSoft Enterprise SCM Strategic Sourcing - Version 9.2 to 9.2 [Release 9]
Information in this document applies to any platform.

Symptoms

When a supplier creates a new user account through the supplier portal the password that is entered is saved to SUP_OB_USR_REG in cleartext.

Steps to reproduce the issue:
1-Sign in to supplier portal and create a new user.
2-Enter all the information and the password for that user.
3-Query record: PS_SUP_OB_USR_REG and notice that the password is not encrypted.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms