Oracle Access Manager security bug so serious it let anyone access protected data

The moral? Don't roll your own crypto, security researcher tells Oracle.