CVE-2008-5456

{"id": "CVE-2008-5456", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-01-14T02:30:00.547", "references": [{"url": "http://secunia.com/advisories/33525", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html", "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/33177", "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id?1021570", "source": "secalert_us@oracle.com"}, {"url": "http://www.vupen.com/english/advisories/2009/0115", "source": "secalert_us@oracle.com"}, {"url": "http://secunia.com/advisories/33525", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/33177", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1021570", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2009/0115", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HRMS en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.9.18 y 9.0.8 permite a usuarios autenticados remotamente que afecta a la confidencialidad e integridad a trav\u00e9s de vectores desconocidos."}], "lastModified": "2024-11-21T00:54:08.850", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2332EAE-75EE-415D-84A6-FE0A19D2C71B"}, {"criteria": "cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF6738B3-ED75-474D-847E-4A4AD1B56959"}, {"criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise:8.9.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A69941F1-0EB4-4260-BE39-1106120A9699"}, {"criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise:9.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1065C086-410A-4ED4-AD06-56715AC5780C"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}