CVE-2009-1989

Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

CVSS v2.0 5.5 MEDIUM

5.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:N

Exploitability : 8.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.vupen.com/english/advisories/2009/1900	Permissions Required
http://secunia.com/advisories/35776	Permissions Required Third Party Advisory
http://www.securitytracker.com/id?1022566	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/35694	Third Party Advisory VDB Entry
http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html	Patch Vendor Advisory
http://osvdb.org/55911	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/51771

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle14::::::
	cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:::::::*
	cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.8:sp1::::::
	cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:::::::*
	cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:sp1::::::
	cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9:bundle14::::::

History

No history.

Information

Published : 2009-07-14 23:30

Updated : 2017-08-17 01:30

NVD link : CVE-2009-1989

Mitre link : CVE-2009-1989

JSON object : View

Products Affected

oracle

peoplesoft_enterprise
jd_edwards_enterpriseone

CWE

NVD-CWE-noinfo

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.vupen.com/english/advisories/2009/1900", "name": "ADV-2009-1900", "tags": ["Permissions Required"], "refsource": "VUPEN"}, {"url": "http://secunia.com/advisories/35776", "name": "35776", "tags": ["Permissions Required", "Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securitytracker.com/id?1022566", "name": "1022566", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://www.securityfocus.com/bid/35694", "name": "35694", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html", "name": "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://osvdb.org/55911", "name": "55911", "tags": ["Broken Link"], "refsource": "OSVDB"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51771", "name": "oracle-pse-jdee-pef-unspecified(51771)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2009-1989", "ASSIGNER": "secalert_us@oracle.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2009-07-14T23:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle14:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.8:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9:bundle14:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-08-17T01:30Z"}