low2.1
CVE-2006-0584
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess…
Impact
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Peoplesoft | Peopletools | Versions 8.4, 8.40, 8.41, 8.42, 8.43, 8.45.5 |