altquark
Legendary Poster
I was looking through the Knowledge Garden earlier today - when I came across this notice :
Title: PeopleSoft EnterpriseOne Password Encryption Vulnerability
https://kgapps2.jdedwards.com/jdecontent/CUCSFlash/Flash/gsstf-04-0610.htm
High-Level Summary
The algorithm used to encrypt user passwords in OneWorld/EnterpriseOne applications has been compromised. A malicious database administrator may make use of this information to obtain user passwords.
All users who might have downloaded SP22_P1 in the past should probably update to ensure that the ESU has been applied. The ESU numbers are as follows :
For OneWorld® XE - ESU 6911235
For OneWorld® ERP 8.0 - ESU 6945128
For EnterpriseOne 8.9 (SP2_D1) - ESU 6929072
My guess is that if you're on B7332 or B7331 you're out of luck.
Title: PeopleSoft EnterpriseOne Password Encryption Vulnerability
https://kgapps2.jdedwards.com/jdecontent/CUCSFlash/Flash/gsstf-04-0610.htm
High-Level Summary
The algorithm used to encrypt user passwords in OneWorld/EnterpriseOne applications has been compromised. A malicious database administrator may make use of this information to obtain user passwords.
All users who might have downloaded SP22_P1 in the past should probably update to ensure that the ESU has been applied. The ESU numbers are as follows :
For OneWorld® XE - ESU 6911235
For OneWorld® ERP 8.0 - ESU 6945128
For EnterpriseOne 8.9 (SP2_D1) - ESU 6929072
My guess is that if you're on B7332 or B7331 you're out of luck.