Patches and Problems with the State’s PeopleSoft

PeopleSoft News Round-up is a monthly news overview that gives an insight into the latest PeopleSoft-related events as well as brief summaries and links to articles on PeopleSoft security.

Critical Patch Update for January 2019

Techbizweb on January 16, 2019

Oracle released its first set of security patches for 2019, delivering a total of 284 new security fixes across the company’s product portfolio.

33 of the fixes address Critical vulnerabilities, with a CVSS score above 9. Out of the total number of vulnerabilities patched this month, 189 may be remotely exploitable without authentication. PeopleSoft Products were also affected. 20 flaws addressed PS, 15 of which are remotely exploitable.

Hawaii’s 66,182 employees moved to the new state’s PeopleSoft Payroll system

Hawaii News Now on January 10, 2019

Hawaii wrapped up a months-long project to transition government employees to a new, digital payroll system. The state’s last-century paper-based payroll system is now a thing of the past. According to the state, the new system is more accurate, nimble, and efficient.

The Northwest Territories government threatens legal action over website alleging PeopleSoft breach

CBC News on January 03, 2019

A former manager with the Northwest Territories government was getting emails to his personal account containing other employees’ contract and wage information. He published a website alleging a breach of government privacy along with personal information about his former colleagues.

The website details allegations of problems with the government’s PeopleSoft human-resources software. A version of the site containing all of the personal employee information originally posted is still publicly visible in Google’s cache.

This is a breach of the privacy of those employees and should not be allowed or even possible.

Elaine Keenan Bengts, the privacy commissioner

The commissioner made a number of recommendations, including that the government does a thorough review of its policies related to email accounts.