----------------------------------------------------------------------



Accurate Vulnerability Scanning
No more false positives, no more false negatives

http://secunia.com/vulnerability_scanning/



----------------------------------------------------------------------

TITLE:
Oracle PeopleSoft Enterprise HCM eProfile Vulnerability

SECUNIA ADVISORY ID:
SA38037

VERIFY ADVISORY:
http://secunia.com/advisories/38037/

DESCRIPTION:
A vulnerability has been reported PeopleSoft Enterprise HCM (Human
Capital Management), which can be exploited by malicious users to
disclose potentially sensitive information or manipulate certain
data.

The vulnerability is caused due to an error in the PeopleSoft
Enterprise HCM eProfile component.

The vulnerability is reported in PeopleSoft Enterprise HCM (TAM)
versions 8.9 and 9.0.

SOLUTION:
Apply patches (please see the vendor's advisory for details).

PROVIDED AND/OR DISCOVERED BY:
For the vulnerabilities fixed in the January Critical Patch Update,
the vendor credits:
* Esteban Martinez Fayo, Application Security, Inc.
* Alexander Kornbrust, Red Database Security
* David Litchfield, NGS Software
* Brian Martin, INS.com
* Guy Pilosof, Sentrigo
* JPCERT/CC Vulnerability Handling Team
* Daiki Fukumori [Secure Sky Technology], JPCERT/CC Vulnerability
Handling Team
* Dennis Yurichev

ORIGINAL ADVISORY:
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2010.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------