RETIRED: Oracle PeopleSoft Enterprise FMS CVE-2010-3537 Remote FMS - AM Vulnerability

Bugtraq ID:	43998
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 12 2010 12:00AM
Updated:	Oct 13 2010 03:59PM
Credit:	Oracle
Vulnerable:	Oracle PeopleSoft Enterprise FMS 9.1 Oracle PeopleSoft Enterprise FMS 9.0 Oracle PeopleSoft Enterprise FMS 8.9
Not Vulnerable:

RETIRED: Oracle PeopleSoft Enterprise FMS CVE-2010-3537 Remote FMS - AM Vulnerability

Oracle PeopleSoft Enterprise FMS is prone to a remote vulnerability in FMS - AM.

The vulnerability can be exploited over the 'HTTP' protocol. An attacker does not require privileges to exploit this vulnerability.

This vulnerability affects the following supported versions:
8.9 Bundle #38, 9.0 Bundle #31, 9.1 Bundle #6

This BID is being retired as a duplicate of BID 43944 (Oracle PeopleSoft Enterprise FMS CVE-2010-3537 Remote FMS - AM Vulnerability).

RETIRED: Oracle PeopleSoft Enterprise FMS CVE-2010-3537 Remote FMS - AM Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Oracle PeopleSoft Enterprise FMS CVE-2010-3537 Remote FMS - AM Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

RETIRED: Oracle PeopleSoft Enterprise FMS CVE-2010-3537 Remote FMS - AM Vulnerability

References:

• Oracle Critical Patch Update Advisory - October 2010 (Oracle)