CVE-2003-0841 — Oracle Peopletools vulnerability

3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.3%
top 44.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Peopletools
Timeline
PublishedNov 17
Latest updateApr 29

Description

The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, which allows remote attackers to steal search results by directly accessing the files via a URL request.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-575c-xx2w-q2mp: The grid option in PeopleSoft 8↗2022-04-29
▶
CVEList
CVE-2003-0841: The grid option in PeopleSoft 8↗2003-10-09
▶
CVE-2003-0841 — Oracle Peopletools vulnerability | cvebase