Vulnerability in Peoplesoft Peopletools
CVE-2003-0628
PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an invalid value.
EPSS: 0.012 (64.9th percentile) — read the EPSS interpretation.
Affected products
- Peoplesoft Peopletools — versions 8.4, 8.10, 8.11
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)