UW-Platteville Outages

[Initial Report]

The Division of Information Technology (DoIT) is aware of a security vulnerability involving a malicious hacker group targeting an Oracle PeopleSoft component. This vulnerability makes the component remotely exploitable without authentication. Currently, the vulnerability risk is low for PSaaS PeopleSoft systems. We do not use this component and have not seen any indication of a compromise. However, out of an abundance of caution, we will be removing this unused component from our environment. 

 Mitigation details:

• What: Removal of the delivered vulnerable code component from all PeopleSoft systems followed by a bounce of the web servers. This will require a 10-minute outage.
• When: Today, June 11, at 5pm.
• Impact: Anyone logged into a PeopleSoft system will be kicked out and will need to re-login after the brief outage. This will also affect PeopleSoft web services and integrations, including report posting.

 In preparation of the production outage at 5pm, we will implement the necessary changes in the non-production environments and restart the web server starting at 2 PM today.

 DoIT is actively monitoring the situation and will keep teams updated if changes occur.

Need help?

Please visit the Outages page for the latest information on this 10-minute outage.