CVE-2003-0628

Published: Dec 15, 2003Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an invalid value.

Affected (16)

Products: Peoplesoft: Peopletools

Peoplesoft

1 product

Peopletools

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Peoplesoft Peopletools	Version 8.10
Peoplesoft Peopletools	Version 8.11
Peoplesoft Peopletools	Version 8.12
Peoplesoft Peopletools	Version 8.13
Peoplesoft Peopletools	Version 8.14
Peoplesoft Peopletools	Version 8.15
Peoplesoft Peopletools	Version 8.16
Peoplesoft Peopletools	Version 8.17
Peoplesoft Peopletools	Version 8.18
Peoplesoft Peopletools	Version 8.19
Peoplesoft Peopletools	Version 8.20
Peoplesoft Peopletools	Version 8.40
Peoplesoft Peopletools	Version 8.41
Peoplesoft Peopletools	Version 8.42
Peoplesoft Peopletools	Version 8.43
Peoplesoft Peopletools	Version 8.4

References (2)

http://marc.info/?l=bugtraq&m=106874146204158&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=106874146204158&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.