----------------------------------------------------------------------


  Secunia CSI
+ Microsoft SCCM
-----------------------
= Extensive Patch Management

http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/


----------------------------------------------------------------------

TITLE:
Oracle PeopleSoft and JD Edwards EnterpriseOne Multiple
Vulnerabilities

SECUNIA ADVISORY ID:
SA39442

VERIFY ADVISORY:
http://secunia.com/advisories/39442/

DESCRIPTION:
Some vulnerabilities have been reported in Oracle PeopleSoft
Enterprise and JD Edwards EnterpriseOne, which can be exploited by
malicious users or malicious people to disclose sensitive information
and manipulate certain data.

1) An unspecified error in the PeopleTools component can be exploited
to manipulate or gain knowledge of certain data.

2) An unspecified error in the PeopleTools component can be exploited
to gain knowledge of certain information.

3) An unspecified error in the PeopleTools component can be exploited
by authenticated users to manipulate certain data.

4) An unspecified error in the PeopleTools component can be exploited
by authenticated users to gain knowledge of certain information.

SOLUTION:
Apply patches (please see the vendor's advisory for details).

PROVIDED AND/OR DISCOVERED BY:
It is currently unclear who reported these vulnerabilities as the
Oracle Critical Patch Update for April 2010 only provides a bundled
list of credits. This section will be updated when/if the original
reporter provides more information.

ORIGINAL ADVISORY:
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2010.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------