CVE-2006-0584: PeopleSoft PeopleTools

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings.

Affected products

• PeopleSoft PeopleTools: version 8.4 only; version 8.40 only; version 8.41 only; version 8.42 only; version 8.43 only; version 8.45.5 only; …

Published 2006-02-08. Last modified 2026-06-16.