CVE-2009-3404 - Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle Peop

CVE-2009-3404

Summary

Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remote authenticated users to affect integrity via unknown vectors.

References

Vulnerable Configurations

cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.23:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.23:*:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.23:*:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.23:*:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 23-10-2012 - 03:11)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:L/Au:S/C:N/I:P/A:N

refmap via4

bid	36773
cert	TA09-294A
confirm	http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
sectrack	1023061

Last major update

23-10-2012 - 03:11

Published

22-10-2009 - 18:30

Last modified

23-10-2012 - 03:11