Vulnerability in Oracle Peopletools
CVE-2003-0841
The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, which allows remote attackers to steal search results by directly accessing the files via a URL request.
EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.
Affected products
- Oracle Peopletools — versions 8.42
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List)