| Package | Affected versions | Patched versions |
|---|---|---|
| peopletools | = 8.4= 8.40= 8.41= 8.42= 8.43= 8.45.5= 8.46.3 |
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free