CVE-2007-3868

{"id": "CVE-2007-3868", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2007-07-18T19:30:00.000", "references": [{"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143", "source": "cve@mitre.org"}, {"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26114", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26166", "source": "cve@mitre.org"}, {"url": "http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf", "source": "cve@mitre.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html", "source": "cve@mitre.org"}, {"url": "http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1018415", "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-200A.html", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/2562", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/2635", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35490", "source": "cve@mitre.org"}, {"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26114", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26166", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1018415", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-200A.html", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/2562", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/2635", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35490", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have an unknown impact via multiple vectors, aka (1) PSE01, (2) PSE02, and (3) PSE03."}, {"lang": "es", "value": "M\u00faltiples vulnerabiliades no especificadas en PeopleTools en Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, y 8.49.02 permite a usuarios remotos validados o atacantes tener un impacto desconocido a trav\u00e9s de m\u00faltiples vectores, tambi\u00e9n conocido como (1) PSE01, (2) PSE02, y (3) PSE03."}], "lastModified": "2024-11-21T00:34:16.150", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise:8.22.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87A75D52-06E3-471D-8BF9-86F2D7228A4D"}, {"criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise:8.47.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3698A475-777C-43FC-8953-EC82AE5C7C36"}, {"criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C49AF59-B975-4698-B460-E61849A61389"}, {"criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3523202-DC61-4324-BA2B-8A7C3B582C9B"}], "operator": "OR"}]}], "evaluatorImpact": "As the impact type is unspecified, it has been set to a default value of \"Obtain Other Access (e.g. application account).\"", "sourceIdentifier": "cve@mitre.org"}