PT-2011-4498 · Oracle · Peoplesoft Enterprise Peopletools

Published 2011-10-18 · Updated 2017-08-29 · CVE-2011-3520

Positive Technologies (AI Summary)

CVSS v2.0

2.8

Low

Base vector

AV:N/AC:M/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products versions 8.49 through 8.51

Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to Personalization in the PeopleSoft Enterprise PeopleTools component.

Recommendations For versions 8.49 through 8.51, update to a version that includes a fix for this issue, as the current versions allow remote authenticated users to affect system integrity.

Fix

Related Identifiers

CVE-2011-3520

Affected Products

Peoplesoft Enterprise Peopletools

References · 6

• http://oracle.com/technetwork/topics/security/cpuoct2011-330135.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3520 · Security Note
• http://osvdb.org/76522 · Note
• http://securityfocus.com/bid/50247 · Note
• http://secunia.com/advisories/46515 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70796 · Note