Security Issues With PeopleSoft Production Refreshes

Appsian05 Mar, 2021Security

The problem comes from the fact that the production environments were configured to trust each other for PeopleSoft Single Signon, but the node names and node passwords were not changed as part of the environment cloning logic. So when Fred signed on to the cloned Financials environment, the PS_TOKEN cookies generated are identical to what the production environment would generate (the details of PS_TOKEN cookie are documented in PeopleBooks, but the node name and node password are the important pieces here).

Recent Profiles

ARK Roofing

Ark Roofing

View Profile

33WIN

33win

View Profile

Okkubet net

Okkubet Net

View Profile

Autoankauf Dortmund – Fahrzeug bewerten lassen

Autoankauf Dortmund – Fahrzeug Bewerten Lassen

View Profile

79KING

79king

View Profile

NHÀ CÁI SUN WIN

NhÀ CÁi Sun Win

View Profile

A One Web Design Dubai

A One Web Design Dubai

View Profile

Cigar Shop OG

Cigar Shop Og

View Profile

Loto188

Loto188

View Profile

33WIN

33win

View Profile