Total vulnerabilities in the database
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings.
Software | From | Fixed in |
---|---|---|
peoplesoft / peopletools | 8.42 | 8.42.x |
peoplesoft / peopletools | 8.43 | 8.43.x |
peoplesoft / peopletools | 8.41 | 8.41.x |
peoplesoft / peopletools | 8.46.3 | 8.46.3.x |
peoplesoft / peopletools | 8.4 | 8.4.x |
peoplesoft / peopletools | 8.45.5 | 8.45.5.x |
peoplesoft / peopletools | 8.40 | 8.40.x |