Bug 2318934 (CVE-2024-21202)
| Summary: | CVE-2024-21202 PIA Core Technology: From CVEorg collector | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability-draft | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | henrryhilton36, imrizwan.ud, johnsoncharless991, zeshan.leghari15 |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2024-10-15 20:10:12 UTC
Acknowledged. Thanks for reporting. Noted that this is a minor update and no email notification will be sent. Thanks for the update. Since this is marked as a minor change with no email notification, I suggest we document the CVE details internally and ensure related teams are aware through the security tracker to avoid missing visibility. Regards: Team https://talksocially.com/ Acknowledged. Thanks for reporting. Noted that this is a minor update and no email notification will be sent. Regards Bitcodesolution Acknowledged. Thanks for reporting. Noted that this is a minor update and no email notification will be sent. Regards https://bitcodesolution.com/ This vulnerability affects PeopleSoft PeopleTools versions 8.59–8.61 and can be exploited over HTTP by an unauthenticated attacker with some user interaction. If exploited, it may allow unauthorized access or modification of PeopleTools data and could impact other connected products, posing moderate confidentiality and integrity risks. You can read more about this issue and its fix at https://startupsflow.com. This vulnerability affects Oracle PeopleSoft PeopleTools versions 8.59–8.61 and can be exploited over HTTP by an unauthenticated attacker with minimal user interaction. Successful exploitation may lead to unauthorized access or modification of PeopleTools data and could also impact other integrated products, resulting in moderate confidentiality and integrity risks. Organizations using PeopleSoft are strongly advised to review this issue, apply the recommended fixes, and strengthen their security posture to prevent potential exploitation. For more insights on cybersecurity risks, vulnerabilities, and best practices, visit https://aimgrip.com |