Oracle applications register user after incorrect password entry 50 times

We have a problem with our Oracle Applications 12.2.4 environment, due to which the user logs into the application after entering the wrong password 50 times. Basically you enter any username and then an invalid password. Click Login 50 times. A notification will appear stating that you have reached the maximum number of login attempts, and then when you click OK, it will not log out, but will register you instead.

Needless to say, this is a matter of high priority, because confidential employee data (salaries, performance ratings, medical information, bonuses, performance reviews, stock distribution, incentives, complaints, lawsuits regarding sexual harassment, etc.) is a security error. So far, we have not had a response to our request for P1 service with Oracle support.

Anyone else having this problem? Is there a fix to fix this? Is there a profile option that controls this problem or fixes this problem?

+5
source share
1 answer

Oracle has provided fix 26663218 in which the problem is fixed.

0
source

Source: https://habr.com/ru/post/1275660/


All Articles