Bug 197228

Summary: Login Creation Req sends Login Info
Product: [Retired] Red Hat Network Reporter: Amanda Carter <acarter>
Component: RHN/OtherAssignee: Mike Orazi <morazi>
Status: CLOSED WORKSFORME QA Contact: Red Hat Satellite QA List <satqe-list>
Severity: high Docs Contact:
Priority: high    
Version: RHN StableCC: bhatiam, jgreen, rhn-bugs
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-06-20 20:27:48 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Amanda Carter 2006-06-29 13:55:35 UTC
This email is sent from RHN system and oracle team doesn't have any control.
Please create a ticket at bugzilla.redhat.com for the RHN team to fix this.
Please reply to this email if you need any help.

Thanks
Bala Govindan.


Below is a copy of a login creation request email that was sent to a customer
(to a customer who already had a login on their account). Notice that the
customer's login is listed as the customer name instead of the actual Customer
Name. Why is this? I would think that this would be a security problem given
that we are sending the login for an account to someone who is not listed on the
account. Why would it be pulling this information instead of the Oracle customer
name? Accounts that do not have a login list the company name correctly.
>>
>> Thanks,
>> Amanda
>>
>>
>> From: *customerservice
>> *To: *help.desk.uk
>> *Cc: *operations.uk
>> *Date: *Thu Jun 22 10:31:33 EDT 2006
>> *Subject: *Red Hat login creation request
>> *Attachments:*
>>
>> Dear Red Hat Customer,
>>
>> We recently received a request for Red Hat subscription services for
>> the following account:
>>
>> Customer Name : stvincent
>> Account Number: 400447
>>
>> In order to access the services included in a Red Hat subscription,
>> your organization needs a Red Hat login. To create a Red Hat login,
>> please visit:
>>
>>

https://rhn.redhat.com/rhn/newlogin/Cre
atePersonal.do?checksum=1606802x54d63b89c56e6faf7756e57de93ec38c

>>
>> If you are not the technical manager who will utilize the Red Hat
>> services included with the subscription you purchased, we recommend
>> you forward this email to the appropriate user within your
>> organization.
>>
>> If you have any questions about your account or Red Hat login, please
>> locate the the Red Hat Customer Service Representative contact
>> information for your region at:
>>
>> http://www.redhat.com/about/cont act
>>
>> or phone us at 1-888-REDHAT-1 (1-888-733-4281) or email us at
>> customerservice.
>>
>> If you have already created a Red Hat login, please disregard this
>> message.
>>
>> Thank you again for choosing Red Hat.
>>
>> Sincerely,
>> Red Hat Account Management Team

Comment 2 Amanda Carter 2008-06-20 20:27:48 UTC
This has been fixed in production. Not sure which release, but some time ago.