PT-2019-16526 · Oracle · Peoplesoft Enterprise Fin Project Costing

Publicado 2019-07-23 · Atualizado 2020-08-24 · CVE-2019-2831

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FIN Project Costing version 9.2

Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Project Costing. Successful attacks can result in unauthorized update, insert, or delete access to some accessible data and unauthorized ability to cause a partial denial of service of PeopleSoft Enterprise FIN Project Costing.

Recommendations For version 9.2, update to a version that includes a fix for this issue to prevent unauthorized access and partial denial of service.

Correção

Identificadores relacionados

CVE-2019-2831

Produtos afetados

Peoplesoft Enterprise Fin Project Costing

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-2831 · Aviso do Fabricante
• http://oracle.com/technetwork/security-advisory/cpujul2019-5072835.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-2831 · Nota de Segurança