Oracle PeopleSoft CVE-2010-3530 Remote PeopleSoft Enterprise HCM - HR Vulnerability

Bugtraq ID:	43974
Class:	Unknown
CVE:	CVE-2010-3530
Remote:	Yes
Local:	No
Published:	Oct 12 2010 12:00AM
Updated:	Oct 12 2010 12:00AM
Credit:	Oracle
Vulnerable:	Oracle PeopleSoft Enterprise Human Capital Management 9.1 Oracle PeopleSoft Enterprise Human Capital Management 9.0
Not Vulnerable:

Oracle PeopleSoft CVE-2010-3530 Remote PeopleSoft Enterprise HCM - HR Vulnerability

Oracle PeopleSoft is prone to a remote vulnerability in PeopleSoft Enterprise HCM - HR.

The vulnerability can be exploited over the 'HTTP' protocol. An attacker does not require privileges to exploit this vulnerability.

This vulnerability affects the following supported versions:
9.0 Bundle #13, 9.1 Bundle #3

Oracle PeopleSoft CVE-2010-3530 Remote PeopleSoft Enterprise HCM - HR Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle PeopleSoft CVE-2010-3530 Remote PeopleSoft Enterprise HCM - HR Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Oracle PeopleSoft CVE-2010-3530 Remote PeopleSoft Enterprise HCM - HR Vulnerability

References:

• Oracle Critical Patch Update Advisory - October 2010 (Oracle)