Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cr3c-c3mj-8xqv

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.

EPSS

Процентиль: 79%
0.02057
Низкий

Связанные уязвимости

nvd
больше 22 лет назад

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.

EPSS

Процентиль: 79%
0.02057
Низкий