CVE Vulnerabilities

CVE-2003-0628

Published: Dec 15, 2003 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an invalid value.

Affected Software

Name Vendor Start Version End Version
Peopletools Peoplesoft 8.4 8.4
Peopletools Peoplesoft 8.10 8.10
Peopletools Peoplesoft 8.11 8.11
Peopletools Peoplesoft 8.12 8.12
Peopletools Peoplesoft 8.13 8.13
Peopletools Peoplesoft 8.14 8.14
Peopletools Peoplesoft 8.15 8.15
Peopletools Peoplesoft 8.16 8.16
Peopletools Peoplesoft 8.17 8.17
Peopletools Peoplesoft 8.18 8.18
Peopletools Peoplesoft 8.19 8.19
Peopletools Peoplesoft 8.20 8.20
Peopletools Peoplesoft 8.40 8.40
Peopletools Peoplesoft 8.41 8.41
Peopletools Peoplesoft 8.42 8.42
Peopletools Peoplesoft 8.43 8.43

References