CVE-2019-12579: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA Linux/macOS binary openvpnlauncher.64 binary is setuid root. This binary accepts several...

CVE-2019-12574: Untrusted Search Path

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The...

CVE-2019-12575: Uncontrolled Search Path Element

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The rootrunner.64 binary is setuid root. This binary executes /opt/pia/ruby/64/ruby, which in turn attempts t...

PT-2019-12866

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 for macOS Description A local, authenticated attacker could run arbitrary code with elevated privileges due to a vulnerability in the openvpn launcher binary, which is setui...

CVE-2019-12572

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client 1.0.2 build 02363 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. On startup, the PIA Windows service pia-service.exe loads the OpenSSL library from...

CVE-2019-12572

CVE-2019-12572 affects London Trust Media Private Internet Access (PIA) VPN Client for Windows 1.0.2 (build 02363). On startup, pia-service.exe loads libeay32.dll which seeks C:\etc\ssl\openssl.cnf; a low-privilege user can create that path and a malicious openssl.cnf to load a forged OpenSSL eng...

CVE-2019-12572

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client 1.0.2 build 02363 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. On startup, the PIA Windows service pia-service.exe loads the OpenSSL library from...

PT-2019-12862

Name of the Vulnerable Software and Affected Versions Private Internet Access PIA VPN Client version 1.0.2 build 02363 Description A vulnerability could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The issue arises from the PIA Windows service loading the...

CVE-2019-12572: Uncontrolled Search Path Element

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client 1.0.2 build 02363 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. On startup, the PIA Windows service pia-service.exe loads the OpenSSL library from...

The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain unauthorized access to protected information.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data usi...

The vulnerability of the PIA Core Technology sub-component of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Products allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the PIA Core Technology sub-component of the PeopleSoft Enterprise PeopleTools business application suite from Oracle PeopleSoft Products is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, o...

CVE-2019-2637

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2019-2637

CVE-2019-2637 affects Oracle PeopleSoft Enterprise PeopleTools (PIA Core Technology) in versions 8.55, 8.56 and 8.57. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, with successful attacks potentially enabling una...

CVE-2019-2597

CVE-2019-2597 affects Oracle PeopleSoft Enterprise PeopleTools, subcomponent PIA Core Technology. Affected versions: 8.55, 8.56, 8.57. The vulnerability can be exploited by an unauthenticated attacker over HTTP with network access, and successful attacks require user interaction. Impact includes ...

CVE-2019-2637: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2019-2597: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component Access Control Error Vulnerability (CNVD-2019-28269)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation. The products provide human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise PeopleTools is one of the tools and technology platform...

Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component Access Control Error Vulnerability (CNVD-2019-28266)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation. The products provide human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise PeopleTools is one of the tools and technology platform...

PT-2019-1957

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55, 8.56, and 8.57 Description The issue is related to inadequate access control in the PIA Core Technology component of Oracle PeopleSoft Products. It allows an unauthenticated attacker with networ...

PT-2019-1949

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55 through 8.57 Description The issue is related to insufficient access controls in the PIA Core Technology subcomponent of PeopleSoft Enterprise PeopleTools, part of Oracle PeopleSoft Products. Thi...