PT-2019-16526 · Oracle · Peoplesoft Enterprise Fin Project Costing

Published 2019-07-23 · Updated 2020-08-24 · CVE-2019-2831

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FIN Project Costing version 9.2

Description The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Project Costing. Successful attacks can result in unauthorized update, insert, or delete access to some accessible data and unauthorized ability to cause a partial denial of service of PeopleSoft Enterprise FIN Project Costing.

Recommendations For version 9.2, update to a version that includes a fix for this issue to prevent unauthorized access and partial denial of service.

Fix

Related Identifiers

CVE-2019-2831

Affected Products

Peoplesoft Enterprise Fin Project Costing

References · 3

• https://osv.dev/vulnerability/CVE-2019-2831 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujul2019-5072835.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-2831 · Security Note