Unauthenticated Access in PeopleSoft Enterprise PT PeopleTools

Executive Summary

This vulnerability exists in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft, specifically in the Deployment Package component. It affects supported versions 8.61 and 8.62. The vulnerability is easily exploitable by an unauthenticated attacker who has network access via HTTP.

A successful attack can allow the attacker to compromise PeopleSoft Enterprise PT PeopleTools, gaining unauthorized access to critical data or even complete access to all accessible data within the product. Additionally, the attacker may be able to perform unauthorized updates, inserts, or deletions on some of the accessible data.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability includes unauthorized access to sensitive or critical data within PeopleSoft Enterprise PT PeopleTools. An attacker could gain complete access to all accessible data or modify data by updating, inserting, or deleting it without authorization.

This could lead to data breaches, loss of data integrity, and potential disruption of business operations that rely on the PeopleSoft system.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows unauthorized access to critical data and unauthorized modification of some data within PeopleSoft Enterprise PT PeopleTools. Such unauthorized access and data manipulation can lead to violations of data protection requirements mandated by common standards and regulations like GDPR and HIPAA, which require strict controls over access to sensitive and personal data.

Therefore, exploitation of this vulnerability could result in non-compliance with these regulations due to potential data breaches, unauthorized data disclosure, and integrity violations.

Useful 0 Not Useful 0