Back to Database
Status published
Low
CVE-2006-0584
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS...
Vulnerability Description
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-0584
Credits & Attribution
No credits recorded in the NVD database.
References
More from peoplesoft
View All →CVE-2004-2435
Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System...
Medium
4.3
CVE-2003-0950
PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to...
High
7.5
CVE-2003-0629
Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools...
Medium
4.3
CVE-2003-0628
PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier...
Medium
5
CVE-2003-0627
psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers...
Medium
5
Affected Vendor
peoplesoft
View all reports →Affected Software
peopletools
Vulnerable Versions:
8.4, 8.40, 8.41, 8.42, 8.43, 8.45.5, 8.46.3
Timeline
Official Publish:
February 8th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.