PT-2003-1908 · Oracle · Peoplesoft

Barrett Mcguire + 2 · Publicado 2003-10-09 · Atualizado 2019-08-19 · CVE-2003-0841

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PeopleSoft version 8.42

Description The issue concerns the grid option in PeopleSoft, which stores temporary .xls files in guessable directories under the web document root. This allows remote attackers to steal search results by directly accessing the files via a URL request.

Recommendations For PeopleSoft version 8.42, consider restricting access to the temporary directories where .xls files are stored to prevent unauthorized access. As a temporary workaround, restrict direct URL access to these files until a more permanent solution is implemented.

Correção

Identificadores relacionados

CVE-2003-0841

Produtos afetados

Peoplesoft

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2003-0841 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=106554919000847&w=2 · Nota