The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Peopletools | Peoplesoft | 8.4 (including) | 8.4 (including) |
| Peopletools | Peoplesoft | 8.40 (including) | 8.40 (including) |
| Peopletools | Peoplesoft | 8.41 (including) | 8.41 (including) |
| Peopletools | Peoplesoft | 8.42 (including) | 8.42 (including) |
| Peopletools | Peoplesoft | 8.43 (including) | 8.43 (including) |
| Peopletools | Peoplesoft | 8.45.5 (including) | 8.45.5 (including) |
| Peopletools | Peoplesoft | 8.46.3 (including) | 8.46.3 (including) |