The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
47 views

Is it a security risk to have 'Control + j' functionality enabled in a production instance of PeopleSoft?

The control + j feature within PeopleSoft outputs a list of potentially interesting data for a potential attacker. The feature is generally used to aid in debugging. Here is a the [censored] output ...
0
votes
0answers
76 views

How to disable x-oracle-dms-ecid cookie

During a security audit, our cliente found that we are sending to the cliente a cookie called 'x-oracle-dms-ecid'. They asked to disable it or change its name. We have been reading all the Oracle ...
0
votes
0answers
61 views

Fixing compression oracle in GZIP library

What design change would you add to the GZIP algorithm so that it makes sure that compression oracle is not present anymore? This is assuming that both the INFLATE and DEFLATE endpoint designs can be ...