CVE:CVE-2008-5451
CNNVD:CNNVD-200901-157
Oracle Database是一款商业性质大型数据库系统。
Oracle PeopleSoft Enterprise和JD Edwards EnterpriseOne(8.97.2.5) 组件JD Edwards Tools 存在未明访问控制安全漏洞。远程认证用户可以通过未明向量影响系统的机密性。
solution:Upgrade jdedwards enterpriseone to a higher version than 8.97.2.5,and avoid the version 8.97.2.5; Upgrade oracle peoplesoft_enterprise to a higher version than 8.97.2.5,and avoid the version 8.97.2.5