Unscored CVE-2003-0628 EUVD-2003-0622GHSA-p7fx-hjx6-67xj

PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the fu…

Published Nov 18, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an invalid value.

References

20031113 Corsaire Security Advisory: PeopleSoft Gateway Administration servlet path disclosure issue mailing-list