NetSight
medium5.0

CVE-2003-0628

PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for ser…

Impact

PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an invalid value.

Affected products

VendorProductAffected versions
PeoplesoftPeopletools
Versions 8.4, 8.10, 8.11, 8.12, 8.13, 8.14

References