I'm speaking at OpenWorld 2017

Wednesday, 17 December 2014

Forgotten Password Bug

Discovered an issue today in the Forgotten Password functionality in PeopleTools (8.52, 8.53 and 8.54 and probably 8.50)

Symbol characters are used in the random password that is generated and emailand to the end user.  Unfortunately, the open and close chevron ( < and > ) symbols are two of the characters used.

Forgotten Password Email Text is stored in HTML and the new password is merged into this text using a variable name of <<%PASSWORD>>.  So, as you can imagine, any password that contains one of these 2 chevron symbols causes the email text to get corrupted and will either show no password or a shortened password in the delivered email.

The fix to this is as simple as removing these symbols from the array &Array_Special in FUNCLIB_PTSEC.OPRPSWD.FieldFormula SetPasswordArrays() function.


No comments: