Description
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings.
References
- 16507 vdb-entry
- 22952 vdb-entry
- 20060204 PeopleSoft (Oracle) PSCipher Encryption Weakness mailing-list