Bug 197228 - Login Creation Req sends Login Info
Summary: Login Creation Req sends Login Info
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Red Hat Network
Classification: Retired
Component: RHN/Other
Version: RHN Stable
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Mike Orazi
QA Contact: Red Hat Satellite QA List
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-06-29 13:55 UTC by Amanda Carter
Modified: 2008-06-20 20:27 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-06-20 20:27:48 UTC
Embargoed:


Attachments (Terms of Use)

Description Amanda Carter 2006-06-29 13:55:35 UTC
This email is sent from RHN system and oracle team doesn't have any control.
Please create a ticket at bugzilla.redhat.com for the RHN team to fix this.
Please reply to this email if you need any help.

Thanks
Bala Govindan.


Below is a copy of a login creation request email that was sent to a customer
(to a customer who already had a login on their account). Notice that the
customer's login is listed as the customer name instead of the actual Customer
Name. Why is this? I would think that this would be a security problem given
that we are sending the login for an account to someone who is not listed on the
account. Why would it be pulling this information instead of the Oracle customer
name? Accounts that do not have a login list the company name correctly.
>>
>> Thanks,
>> Amanda
>>
>>
>> From: *customerservice
>> *To: *help.desk.uk
>> *Cc: *operations.uk
>> *Date: *Thu Jun 22 10:31:33 EDT 2006
>> *Subject: *Red Hat login creation request
>> *Attachments:*
>>
>> Dear Red Hat Customer,
>>
>> We recently received a request for Red Hat subscription services for
>> the following account:
>>
>> Customer Name : stvincent
>> Account Number: 400447
>>
>> In order to access the services included in a Red Hat subscription,
>> your organization needs a Red Hat login. To create a Red Hat login,
>> please visit:
>>
>>

https://rhn.redhat.com/rhn/newlogin/Cre
atePersonal.do?checksum=1606802x54d63b89c56e6faf7756e57de93ec38c

>>
>> If you are not the technical manager who will utilize the Red Hat
>> services included with the subscription you purchased, we recommend
>> you forward this email to the appropriate user within your
>> organization.
>>
>> If you have any questions about your account or Red Hat login, please
>> locate the the Red Hat Customer Service Representative contact
>> information for your region at:
>>
>> http://www.redhat.com/about/cont act
>>
>> or phone us at 1-888-REDHAT-1 (1-888-733-4281) or email us at
>> customerservice.
>>
>> If you have already created a Red Hat login, please disregard this
>> message.
>>
>> Thank you again for choosing Red Hat.
>>
>> Sincerely,
>> Red Hat Account Management Team

Comment 2 Amanda Carter 2008-06-20 20:27:48 UTC
This has been fixed in production. Not sure which release, but some time ago.


Note You need to log in before you can comment on or make changes to this bug.