CVE-2017-10422: Infoleak
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). The supported version that is affected is 8.54. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10422?
CVE-2017-10422 has been classified with a moderate severity level due to its potential exploit by unauthenticated network attackers.
How do I fix CVE-2017-10422?
To fix CVE-2017-10422, apply the latest security updates and patches provided by Oracle for PeopleSoft Enterprise PeopleTools version 8.54.
Who is affected by CVE-2017-10422?
CVE-2017-10422 affects users running Oracle PeopleSoft Enterprise PeopleTools version 8.54.
What type of attack does CVE-2017-10422 involve?
CVE-2017-10422 involves a network-based attack that can be initiated through HTTP by an unauthenticated attacker.
Is CVE-2017-10422 easy to exploit?
CVE-2017-10422 is considered difficult to exploit due to the requirements for network access and specific conditions.