CVE-2012-3195: Medium severity oracle peoplesoft products vulnerability

Published Oct 17, 2012

Updated

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal.

Affected Software

3 affected components

Oracle PeopleSoft Products=8.50

Oracle PeopleSoft Products=8.51

Oracle PeopleSoft Products=8.52

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3195?

CVE-2012-3195 has a moderate severity rating due to its ability to affect confidentiality for authenticated users.

Who is affected by CVE-2012-3195?

CVE-2012-3195 affects users of Oracle PeopleSoft Products versions 8.50, 8.51, and 8.52.

How do I fix CVE-2012-3195?

To fix CVE-2012-3195, users should apply the latest patches and updates provided by Oracle for the affected PeopleSoft versions.

What types of attacks are possible due to CVE-2012-3195?

CVE-2012-3195 potentially allows remote authenticated users to compromise the confidentiality of sensitive information.

Is there a workaround for CVE-2012-3195?

Currently, no specific workaround is recommended for CVE-2012-3195; applying the available patches is advised.