CVE-2019-2586: Medium severity oracle peopletools vulnerability

Published Apr 23, 2019

Updated

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: RemoteCall). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PT PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Affected Software

3 affected components

Oracle PeopleSoft Enterprise PeopleTools=8.55

Oracle PeopleSoft Enterprise PeopleTools=8.56

Oracle PeopleSoft Enterprise PeopleTools=8.57

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Event History

Apr 23, 2019

CVE Published

via MITRE·06:16 PM

Data Sourced

via MITRE·06:16 PM

DescriptionWeakness

Data Sourced

via NVD·07:32 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-2586?

CVE-2019-2586 is categorized as a high severity vulnerability that can be easily exploited.

How do I fix CVE-2019-2586?

To mitigate CVE-2019-2586, it is recommended to apply the latest security patches provided by Oracle for affected PeopleSoft versions.

What versions of PeopleSoft are affected by CVE-2019-2586?

CVE-2019-2586 affects Oracle PeopleSoft Enterprise PT PeopleTools versions 8.55, 8.56, and 8.57.

Who can exploit CVE-2019-2586?

CVE-2019-2586 can be exploited by low privileged attackers with network access via HTTP.

What component is vulnerable in CVE-2019-2586?

CVE-2019-2586 involves a vulnerability in the RemoteCall subcomponent of the PeopleSoft Enterprise PT PeopleTools.