6.4

CVE-2008-4000

EPSS 2.23%
Veröffentlicht 14.10.2008 21:11:11
Zuletzt bearbeitet 16.06.2026 22:56:58
Erkennungen
Login

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality and integrity via unknown vectors.  NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue allows bypass of the lockout mechanism using brute force guessing of credentials and a response discrepancy information leak when the password is correct.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Jdedwards ≫ Enterpriseone Version 8.48.18

Oracle ≫ Jd Edwards Enterpriseone Version 8.49.14

Oracle ≫ Peoplesoft Enterprise Version 8.48.18

Oracle ≫ Peoplesoft Peopletools Version 8.49.14

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.23%	0.805

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/32291

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html

http://www.vupen.com/english/advisories/2008/2825

http://www.securityfocus.com/archive/1/497543/100/0/threaded

http://www.securitytracker.com/id?1021055

https://exchange.xforce.ibmcloud.com/vulnerabilities/45902

https://nvd.nist.gov/vuln/detail/CVE-2008-4000

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-4000

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-4000

EUVD