[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Oracle Hyperion password disclosure...



Hi, all.

 

Oracle Hyperion Rapid Deployment installer leaves plaintext passwords in config files and logfiles.  Oracle has known about this for 2 years, and has decided not to patch any of the product versions prior to the latest version.  I have additional details if anyone is interested.

 

Jeff Kayser

Jibe Consulting | Managing Principal Consultant

5000 Meadows Rd. Suite 300

Lake Oswego, OR 97035

O: 503-517-3266 | C: 503.901.5021

jeff.kayser@xxxxxxxxxxxxxxxxxx

 

cid:image009.jpg@01D00437.3D3091D0

                              cid:image010.jpg@01D00437.3D3091D0     cid:image011.jpg@01D00437.3D3091D0     cid:image012.jpg@01D00437.3D3091D0   

 

cid:image013.jpg@01D00437.3D3091D0

 

Disclaimer: This electronic message may contain information that is Confidential or legally privileged. It is intended only for the use of the individual(s) and entity named in the message. If you are not an intended recipient of this message, please notify the sender immediately and delete the material from your computer. Do not deliver, distribute or copy this message and do not disclose its contents or take any action in reliance on the information it contains.

Attachment: Hyperion Essbase Rapid Deploy.docx
Description: Hyperion Essbase Rapid Deploy.docx