Return
-
Title
PeopleSoft Password available in clear text in Stat migration logs. -
Description
In the migration log for the failed migration, the password for the staging database user is shown in clear text in the Migration Console Log Tab. That console is available for all Stat client users to view, so any developer can see the value displayed if they decide to look for these errors. This is a major security issue and needs to be fixed as soon as possible.
The error message displayed was as follows (with the actual password that was displayed changed to X's):
Stat is unable to run executable:R:\PTools\peopletools\8.54.12\\BIN\CLIENT\WINX86\Pside.exe -CT ORACLE -CD STAT4HCM -CO MHEIDER2 -CP XXXXXXX -MN APPLICATION_DESIGNER
-
Cause
This has been classified as a Security issue by Development. -
Resolution
Unfortunately that cannot be configured. Has been created a one-off solution for the customer on 5.7.3 HF-I.The official solution will be targeted to the next hotfixes for 5.7.4 and 5.8.0.A possible Workaround if it is not set, is to use Auto Migration ON. -
Defect ID
STAT-1538 -
Additional Information
STAT-1538