PT-2019-1856 · Oracle · Peoplesoft Enterprise

Publicado 2019-04-16 · Atualizado 2020-08-24 · CVE-2019-2700

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise ELM version 9.2

Description The issue is related to inadequate access control in the Enterprise Learning Mgmt component of PeopleSoft Enterprise ELM. This can be exploited by a remote attacker to gain unauthorized access to protected information using the HTTP protocol. Successful attacks may result in unauthorized update, insert, or delete access to some accessible data.

Recommendations For version 9.2, apply the necessary security patches to fix the inadequate access control issue. As a temporary workaround, consider restricting access to the Enterprise Learning Mgmt component until a patch is available.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2019-01508

CVE-2019-2700

Produtos afetados

Peoplesoft Enterprise

Referências · 5

• http://oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html · Aviso do Fabricante
• https://oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html · Nota
• https://bdu.fstec.ru/vul/2019-01508 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-2700 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-2700 · Aviso do Fabricante