CVE-2011-3520

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect integrity via unknown vectors related to Personalization.

CVSS v2.0 2.8 LOW

2.8^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:M/C:N/I:P/A:N

Exploitability : 5.5 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication MULTIPLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html	Patch Vendor Advisory
http://secunia.com/advisories/46515
http://osvdb.org/76522
http://www.securityfocus.com/bid/50247
https://exchange.xforce.ibmcloud.com/vulnerabilities/70796

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:peoplesoft_products:8.50:::::::*
	cpe:2.3:a:oracle:peoplesoft_products:8.51:::::::*
	cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.51:::::::*
	cpe:2.3:a:oracle:peoplesoft_products:8.49:::::::*
	cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.49:::::::*
	cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.50:::::::*

Information

Published : 2011-10-18 15:55

Updated : 2017-08-28 18:30

NVD link : CVE-2011-3520

Mitre link : CVE-2011-3520

JSON object : View

CWE

NVD-CWE-noinfo

Advertisement

Products Affected

oracle

peoplesoft_products
peoplesoft_enterprise_peopletools

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html", "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/46515", "name": "46515", "tags": [], "refsource": "SECUNIA"}, {"url": "http://osvdb.org/76522", "name": "76522", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.securityfocus.com/bid/50247", "name": "50247", "tags": [], "refsource": "BID"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/70796", "name": "ops-psept-pers-unspecified(70796)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect integrity via unknown vectors related to Personalization."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2011-3520", "ASSIGNER": "secalert_us@oracle.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:M/C:N/I:P/A:N", "authentication": "MULTIPLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 5.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2011-10-18T22:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_products:8.50:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_products:8.51:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.51:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_products:8.49:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.49:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.50:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-08-29T01:30Z"}