PT-2006-6096 · Oracle · Peoplesoft Enterprise

Publicado 2006-10-18 · Atualizado 2018-10-17 · CVE-2006-5376

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise versions 8.22 GA through 8.22.11 Oracle PeopleSoft Enterprise versions 8.46 GA through 8.46.15 Oracle PeopleSoft Enterprise versions 8.47 GA through 8.47.09 Oracle PeopleSoft Enterprise versions 8.48 GA through 8.48.03

Description The issue affects the PeopleTools component and has remote authenticated attack vectors. The impact of the vulnerabilities is unknown.

Recommendations For Oracle PeopleSoft Enterprise versions 8.22 GA through 8.22.11, update to a version later than 8.22.11. For Oracle PeopleSoft Enterprise versions 8.46 GA through 8.46.15, update to a version later than 8.46.15. For Oracle PeopleSoft Enterprise versions 8.47 GA through 8.47.09, update to a version later than 8.47.09. For Oracle PeopleSoft Enterprise versions 8.48 GA through 8.48.03, update to a version later than 8.48.03.

Correção

Identificadores relacionados

CVE-2006-5376

Produtos afetados

Peoplesoft Enterprise

Referências · 9

• http://securityfocus.com/archive/1/449711/100/0/threaded · Aviso do Fabricante
• http://secunia.com/advisories/22396 · Nota
• http://vupen.com/english/advisories/2006/4065 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5376 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA06-291A.html · Nota
• http://securitytracker.com/id?1017077 · Nota
• http://red-database-security.com/advisory/oracle_cpu_oct_2006.html · Nota
• http://securityfocus.com/bid/20588 · Correção
• http://oracle.com/technetwork/topics/security/cpuoct2006-095368.html · Nota