CVE-2017-10418: Medium severity oracle peopletools vulnerability

Published Oct 19, 2017

Updated

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PeopleSoft CDA). The supported version that is affected is 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. While the vulnerability is in PeopleSoft Enterprise PT PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PT PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).

Affected Software

1 affected component

Oracle PeopleSoft Enterprise PeopleTools=8.56

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Event History

Oct 19, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-10418?

CVE-2017-10418 is classified as a high severity vulnerability.

How do I fix CVE-2017-10418?

To fix CVE-2017-10418, update Oracle PeopleSoft Enterprise PT PeopleTools to the latest version that addresses this vulnerability.

Who is affected by CVE-2017-10418?

CVE-2017-10418 affects users of Oracle PeopleSoft Enterprise PT PeopleTools version 8.56.

What type of vulnerability is CVE-2017-10418?

CVE-2017-10418 is an easily exploitable vulnerability that allows a low privileged attacker network access via HTTP.

What component of Oracle PeopleSoft Products does CVE-2017-10418 affect?

CVE-2017-10418 affects the PeopleTools component of Oracle PeopleSoft Products.